GHSL-2023-203: _GHSL-2023-204: Several vulnerabilities in audiobookshelf
Published Dec 13, 2023
·Updated
Audiobookshelf is vulnerable to server-side request forgery (SSRF), arbitrary file read (AFR) and arbitrary file deletion (AFD) depending on the permissions of the user.
Affected Software
1 affected component
Audiobookshelf Audiobookshelf
Event History
Dec 13, 2023
Advisory Published
via GitHub Security Lab·12:00 AM
Data Sourced
via GitHub Security Lab·12:00 AM
DescriptionAffected Software
Frequently Asked Questions
1
What is the severity of GHSL-2023-203?
The severity of GHSL-2023-203 is rated at 60, indicating a medium risk level.
2
What types of vulnerabilities are present in GHSL-2023-203?
GHSL-2023-203 contains server-side request forgery (SSRF), arbitrary file read (AFR), and arbitrary file deletion (AFD) vulnerabilities.
3
How do I fix GHSL-2023-203?
To fix GHSL-2023-203, update to the latest version of Audiobookshelf as recommended in the security advisories.
4
Who is affected by GHSL-2023-203?
Users of Audiobookshelf with specific permissions are affected by GHSL-2023-203.
5
When was GHSL-2023-203 published?
GHSL-2023-203 was published on December 13, 2023.