Beveiligingsadvies

CVE-2026-42887

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-11 19:55:32

Laatst bijgewerkt 2026-05-12 13:29:46

Toegewezen door GitHub_M

CVSS-score 4.5

Status PUBLISHED

Beschrijving

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.33.0, a stored cross-site scripting (XSS) vulnerability exists in the Login Page due to improper sanitization of the authLoginCustomMessage field of the /api/auth-settings endpoint. An attacker with administrative privileges can inject arbitrary HTML/JavaScript that will be rendered on the login page for all users. This vulnerability is fixed in 2.33.0.

← Alle CVE's bekijken Bekijk op cve.org ↗