CVE-2021-21399 | BDVDB-2026-151921 Detail

Description#

Ampache is a web based audio/video streaming application and file manager. Versions prior to 4.4.1 allow unauthenticated access to Ampache using the subsonic API. To successfully make the attack you must use a username that is not part of the site to bypass the auth checks. For more details and workaround guidance see the referenced GitHub security advisory.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12021-04-13Record published in the CVE List.
2. Version 22024-08-03Most recent update recorded in the CVE List.