CVE-2025-46338

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-46338
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.21.0, an improper input handling vulnerability in the `/api/upload` endpoint allows an attacker to perform a reflected cross-site scripting (XSS) attack by submitting malicious payloads in the `libraryId` field. The unsanitized input is reflected in the server’s error message, enabling arbitrary JavaScript execution in a victim's browser. This issue has been patched in version 2.21.0.

6.1 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://github.com/advplyr/audiobookshelf/commit/35870a01583b2947030f4e3d4ac769c3ff298386 Patch
https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-47g3-c5hx-2q3w Exploit Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:audiobookshelf:audiobookshelf:*:*:*:*:*:*:*:*
History

09 May 2025, 19:37

Type Values Removed Values Added
References () https://github.com/advplyr/audiobookshelf/commit/35870a01583b2947030f4e3d4ac769c3ff298386 - () https://github.com/advplyr/audiobookshelf/commit/35870a01583b2947030f4e3d4ac769c3ff298386 - Patch
References () https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-47g3-c5hx-2q3w - () https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-47g3-c5hx-2q3w - Exploit, Vendor Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 6.1
First Time Audiobookshelf
Audiobookshelf audiobookshelf
CPE cpe:2.3:a:audiobookshelf:audiobookshelf:*:*:*:*:*:*:*:*

29 Apr 2025, 13:52

Type Values Removed Values Added
Summary
  • (es) Audiobookshelf es un servidor autoalojado de audiolibros y podcasts. Antes de la versión 2.21.0, una vulnerabilidad de gestión de entrada incorrecta en el endpoint `/api/upload` permitía a un atacante realizar un ataque de cross-site scripting (XSS) reflejado mediante el envío de payloads maliciosos en el campo `libraryId`. La entrada no depurada se refleja en el mensaje de error del servidor, lo que permite la ejecución arbitraria de JavaScript en el navegador de la víctima. Este problema se ha corregido en la versión 2.21.0.

29 Apr 2025, 05:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-04-29 05:15

Updated : 2025-05-09 19:37

NVD link : CVE-2025-46338

Mitre link : CVE-2025-46338

CVE.ORG link : CVE-2025-46338

JSON object : View

Products Affected

audiobookshelf

  • audiobookshelf
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')