Ampache vulnerabilities
We track 5 vulnerabilities in Ampache products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on November 11, 2024.
Latest Ampache vulnerabilities
- 9.0 Critical severity
ampache: Improper Neutralization of Input During Web Page Generation
Ampache is a web based audio/video streaming application and file manager. This vulnerability exists in the interface section of the Ampache menu, where users can change "Custom URL - Logo". This section is not properly sanitized, allowing for the input of str
- 8.1 High severity
ampache: Cross-Site Request Forgery
Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating catalog. This vulnerability allows an attacker to exploit CSRF attacks
- 8.4 High severity
ampache: Improper Neutralization of Input During Web Page Generation
Ampache is a web based audio/video streaming application and file manager. The vulnerability exists in the interface section of the Ampache menu, where users can change the "Custom URL - Favicon". This section is not properly sanitized, allowing for the input
- 8.1 High severity
ampache: Cross-Site Request Forgery
Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating plugins. This vulnerability allows an attacker to exploit CSRF attacks
- 8.1 High severity
ampache: Cross-Site Request Forgery
Ampache is a web based audio/video streaming application and file manager. The current implementation of token parsing fails to properly validate CSRF tokens when activating or deactivating controllers. This vulnerability allows an attacker to exploit CSRF att