CVE-2024-35236mediumCWE-79

CVE-2024-35236: fallo de gravedad media en advplyr audiobookshelf

Audiobookshelf Cross-Site-Scripting vulnerability via crafted ebooks

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear audiobookshelf

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 4.8epss 0.8%
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.10.0, opening an ebook with malicious scripts inside leads to code execution inside the browsing context. Attacking a user with high privileges (upload, creation of libraries) can lead to remote code execution (RCE) in the worst case. This was tested on version 2.9.0 on Windows, but an arbitrary file write is powerful enough as is and should easily lead to RCE on Linux, too. Version 2.10.0 contains a patch for the vulnerability.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Productos afectados
advplyr · audiobookshelf
CVEs relacionadas — advplyr audiobookshelf

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-25205HIGHRemote Authentication-Bypass can lead to server crash or limited information disclosure due to faulty pattern matchingEPSS 4.8%CVE-2026-71209HIGHaudiobookshelf - %2F Encoding Discrepancy Bypasses Cover/Image Auth Exemption Regex, Enabling Unauthenticated Path TraversalEPSS 2.2%CVE-2023-47624HIGHAudiobookshelf Arbitrary File Read VulnerabilityEPSS 0.8%CVE-2023-47619HIGHAudiobookshelf Server-Side Request Forgery and Arbitrary File Read VulnerabilityEPSS 0.6%CVE-2024-43797MEDIUMPath Traversal in audiobookshelfEPSS 0.5%CVE-2026-73085MEDIUMAudiobookshelf: Refresh Token Accepted on Resource EndpointsEPSS 0.5%