UBUNTU-CVE-2024-28853

See a problem?
Please try reporting it to the source first.

Source

https://ubuntu.com/security/CVE-2024-28853

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2024/UBUNTU-CVE-2024-28853.json

JSON Data

https://api.osv.dev/v1/vulns/UBUNTU-CVE-2024-28853

Related

CVE-2024-28853

Published

2024-03-27T14:15:00Z

Modified

2024-10-15T14:14:09Z

Summary

[none]

Details

Ampache is a web based audio/video streaming application and file manager. Stored Cross Site Scripting (XSS) vulnerability in ampache before v6.3.1 allows a remote attacker to execute code via a crafted payload to serval parameters in the post request of /preferences.php?action=adminupdatepreferences. This vulnerability is fixed in 6.3.1.

References

Affected packages

Ubuntu:Pro:16.04:LTS / ampache

Package

Name: ampache
Purl: pkg:deb/ubuntu/ampache?arch=src?distro=esm-apps/xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Affected versions

3.*

3.6-rzb2779+dfsg-0ubuntu5

3.6-rzb2779+dfsg-0ubuntu6

3.6-rzb2779+dfsg-0ubuntu7

3.6-rzb2779+dfsg-0ubuntu8

3.6-rzb2779+dfsg-0ubuntu9

3.6-rzb2779+dfsg-0ubuntu9.1

3.6-rzb2779+dfsg-0ubuntu9.2

Ecosystem specific

{
    "ubuntu_priority": "medium"
}