CVE-2024-43797: Path Traversal in audiobookshelf
audiobookshelf is a self-hosted audiobook and podcast server. A non-admin user is not allowed to create libraries (or access only the ones they have permission to). However, the LibraryController is missing the check for admin user and thus allows a path traversal issue. Allowing non-admin users to write to any directory in the system can be seen as a form of path traversal. However, since it can be restricted to only admin permissions, fixing this is relatively simple and falls more into the realm of Role-Based Access Control (RBAC). This issue has been addressed in release version 2.13.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-43797?
CVE-2024-43797 has a moderate severity rating due to the risk of path traversal allowing unauthorized access to libraries.
How do I fix CVE-2024-43797?
To fix CVE-2024-43797, update Audiobookshelf to version 2.13.0 or later where the admin check has been implemented.
Who is affected by CVE-2024-43797?
Non-admin users of Audiobookshelf prior to version 2.13.0 are affected by CVE-2024-43797.
What is the nature of the vulnerability in CVE-2024-43797?
CVE-2024-43797 is a path traversal vulnerability allowing unauthorized users to access library directories they should not.
What software versions are impacted by CVE-2024-43797?
CVE-2024-43797 impacts Audiobookshelf versions prior to 2.13.0.