Audiobookshelf is a self-hosted audiobook and podcast server. Prior to version 2.10.0, opening an ebook with malicious scripts inside leads to code execution inside the browsing context. Attacking a user with high privileges (upload, creation of libraries) can lead to remote code execution (RCE) in the worst case. This was tested on version 2.9.0 on Windows, but an arbitrary file write is powerful enough as is and should easily lead to RCE on Linux, too. Version 2.10.0 contains a patch for the vulnerability.
CVSS
No CVSS.
References
Configurations
History
10 Jul 2025, 17:32
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:audiobookshelf:audiobookshelf:*:*:*:*:*:*:*:* | |
| First Time |
Audiobookshelf
Audiobookshelf audiobookshelf |
|
| References | () https://github.com/advplyr/audiobookshelf/blob/04ed4810fdfcafc2e82db536edc5870e3f937d00/client/components/readers/EpubReader.vue#L319 - Product | |
| References | () https://github.com/advplyr/audiobookshelf/security/advisories/GHSA-7j99-76cj-q9pg - Exploit, Vendor Advisory | |
| References | () https://github.com/advplyr/audiobookshelf/commit/ce7f891b9b2cb57c6644aaf96f89a8bda6307664 - Patch | |
| References | () https://github.com/advplyr/audiobookshelf/assets/36849099/46f6dfe0-9860-4ec0-a987-b3a553f7e45d - Exploit | |
| References | () https://github.com/advplyr/audiobookshelf/releases/tag/v2.10.0 - Release Notes |
27 May 2024, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-05-27 17:15
Updated : 2025-07-10 17:32
NVD link : CVE-2024-35236
Mitre link : CVE-2024-35236
JSON object : View
Products Affected
audiobookshelf
- audiobookshelf
CWE
No CWE.