Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-fchr-h2rx-xx6p

Опубликовано: 17 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration (security.enabled), SrsSecurity::check(), trunk/src/app/srs_app_security.cpp, and SRS RTMP listener components

An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration (security.enabled), SrsSecurity::check(), trunk/src/app/srs_app_security.cpp, and SRS RTMP listener components

EPSS

Процентиль: 55%
0.00792
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 9.8
nvd
около 2 месяцев назад

An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration (security.enabled), SrsSecurity::check(), trunk/src/app/srs_app_security.cpp, and SRS RTMP listener components

EPSS

Процентиль: 55%
0.00792
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-284