Owncast Project Owncast
6 CVEs affecting Owncast Project Owncast. Latest disclosed: 2024-04-19. Critical: 2, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-46480 | Critical | 9.8 | 2023-11-27 | An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth fun… |
CVE-2022-3751 | Critical | 9.8 | 2022-11-29 | SQL Injection in GitHub repository owncast/owncast prior to 0.0.13. |
CVE-2024-29026 | High | 8.2 | 2024-03-20 | Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. In versions 0.1.2 and prior, a lenient CORS policy all… |
CVE-2021-39183 | High | 8.2 | 2021-12-14 | Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a p… |
CVE-2023-3188 | Medium | 6.5 | 2023-06-10 | Server-Side Request Forgery (SSRF) in GitHub repository owncast/owncast prior to 0.1.0. |
CVE-2024-31450 | Low | 2.7 | 2024-04-19 | Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. The Owncast application exposes an administrator API a… |