CVE-2024-47184: Ampache vulnerable to Stored XSS via Democratic Playlist Name
Published Sep 27, 2024
·Updated
Ampache is a web based audio/video streaming application and file manager. Prior to version 6.6.0, the Democratic Playlist Name is vulnerable to a stored cross-site scripting. Version 6.6.0 fixes this issue.
Affected Software
1 affected component
Ampache Ampache<6.6.0
Remediation
Event History
Sep 27, 2024
CVE Published
via MITRE·02:05 PM
Data Sourced
via MITRE·02:05 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-47184?
CVE-2024-47184 is classified as a medium severity vulnerability due to the risk of stored cross-site scripting.
2
How do I fix CVE-2024-47184?
To fix CVE-2024-47184, upgrade to Ampache version 6.6.0 or later.
3
What type of vulnerability is CVE-2024-47184?
CVE-2024-47184 is a stored cross-site scripting (XSS) vulnerability.
4
Which versions of Ampache are affected by CVE-2024-47184?
CVE-2024-47184 affects all versions of Ampache prior to 6.6.0.
5
What component of Ampache does CVE-2024-47184 impact?
CVE-2024-47184 impacts the Democratic Playlist Name feature in Ampache.