Lucene search
GoogleOSV:CVE-2021-39183HistoryDec 14, 2021 - 8:15 p.m.
CVE-2021-39183
2021-12-1420:15:07
Google
osv.dev
3
Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0.9 by blocking unsafe-inline Content Security Policy and specifying the script-src. The worker-src is required to be set to blob for the video player.
Related
github
github
Unsafe inline XSS in pasting DOM element into chat
2021-12-14 21:48:16
nvd
nvd
CVE-2021-39183
2021-12-14 20:15:07
veracode
veracode
Cross-Site Scripting (XSS)
2021-12-15 06:33:19
cve
cve
CVE-2021-39183
2021-12-14 20:15:07
cvelist
cvelist
CVE-2021-39183 Unsafe inline XSS Owncast
2021-12-14 20:05:12
osv
osv
Unsafe inline XSS in pasting DOM element into chat
2021-12-14 21:48:16
prion
prion
Buffer overflow
2021-12-14 20:15:00