CVE-2023-33498

alist <=3.16.3 is vulnerable to Incorrect Access Control. Low privilege accounts can upload any file.

Source: CVE-2023-33498