ampache vulnerabilities and fixes

Recent CVEs affecting ampache, with upgrade or downgrade steps. 6 tracked.

ampache has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2024-10-09. Highest priority: CVE-2023-0606 (score 39/100).

• CVE-2023-0606 MEDIUM 6.1 UPGRADE Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7.
• CVE-2024-47828 MEDIUM 5.3 UPGRADE ampache is a web based audio/video streaming application and file manager
• CVE-2024-47184 MEDIUM 6.1 UPGRADE Ampache is a web based audio/video streaming application and file manager
• CVE-2024-41665 MEDIUM 5.5 UPGRADE Ampache, a web based audio/video streaming application and file manager, has a stored cross-site scripting (XS
• CVE-2024-28853 LOW 3.9 UPGRADE Ampache is a web based audio/video streaming application and file manager
• CVE-2024-28852 MEDIUM 6.1 UPGRADE Ampache is a web based audio/video streaming application and file manager

FAQ

How do I fix ampache vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ampache being exploited right now?

None of the tracked ampache CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ampache CVE should I patch first?

CVE-2023-0606 currently ranks highest (39/100): Cross-site Scripting (XSS) - Reflected in GitHub repository ampache/ampache prior to 5.5.7..

RSS feed for ampache · ← Back to latest CVEs