Audiobookshelf Vulnerability Allows Path Traversal, Requires Immediate Upgrade
CVE-2024-43797

4.3MEDIUM

Key Information:

Vendor

Advplyr

Status
Audiobookshelf
Vendor
CVE Published:
2 September 2024

What is CVE-2024-43797?

audiobookshelf is a self-hosted audiobook and podcast server. A non-admin user is not allowed to create libraries (or access only the ones they have permission to). However, the LibraryController is missing the check for admin user and thus allows a path traversal issue. Allowing non-admin users to write to any directory in the system can be seen as a form of path traversal. However, since it can be restricted to only admin permissions, fixing this is relatively simple and falls more into the realm of Role-Based Access Control (RBAC). This issue has been addressed in release version 2.13.0. All users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected Version(s)

audiobookshelf < 2.13.0

References

https://github.com/advplyr/audiobookshelf/security/adviso...
x_refsource_CONFIRM
https://github.com/advplyr/audiobookshelf-ghsa-gg56-vj58-...
x_refsource_MISC
https://github.com/advplyr/audiobookshelf/blob/1c0d6e9c67...
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.