Cross site scripting

2020-05-1817:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

49.0%

JSON

A Reflected XSS was found in the server selection box inside the login page at: enginemanager/loginfailed.html in Wowza Streaming Engine <= 4.x.x. This issue was resolved in Wowza Streaming Engine 4.8.0.

CPENameOperatorVersion
streaming_enginege4.0.0
streaming_enginele4.8.0

CPE	Name	Operator	Version
	streaming_engine	ge	4.0.0
	streaming_engine	le	4.8.0

References

raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2019-19456.txt

www.gruppotim.it/redteam

www.wowza.com/docs/wowza-streaming-engine-4-8-0-release-notes

0.001 Low

EPSS

Percentile

49.0%

JSON

Related for PRION:CVE-2019-19456