CVE-2023-51665 (published 2023-12-27T17:26:57.166Z)
Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.7.0, Audiobookshelf is vulnerable to unauthenticated blind server-side request (SSRF) vulnerability in Auth.js. This vulnerability has been addressed in version 2.7.0. There are no known workarounds for this vulnerability.


Affected products: Vendor: advplyr
Product: audiobookshelf
Versions: < 2.7.0