CVE-2022-3751

SQL Injection in GitHub repository owncast/owncast prior to 0.0.13...

Sql injection

SQL Injection in GitHub repository owncast/owncast prior to 0.0.13...

PT-2022-24016 · Owncast · Owncast

Name of the Vulnerable Software and Affected Versions: owncast versions prior to 0.0.13 Description: The issue is related to SQL Injection in the GitHub repository owncast/owncast. Recommendations: For versions prior to 0.0.13, update to version 0.0.13 or later to resolve the issue...

CVE-2022-3751 SQL Injection in owncast/owncast

SQL Injection in GitHub repository owncast/owncast prior to 0.0.13...

Owncast SQL注入漏洞

Git is a free, open source distributed version control system. A SQL injection vulnerability exists in versions prior to Owncast 0.0.13. An attacker can exploit this vulnerability to obtain sensitive database information...

CVE-2022-3751 SQL Injection in owncast/owncast

SQL Injection in GitHub repository owncast/owncast prior to 0.0.13...

CVE-2022-3751

CVE-2022-3751 : Owncast (github.com/owncast/owncast) is vulnerable to SQL Injection in versions prior to 0.0.13. The root cause is improper handling of input in SQL queries, enabling attacker-controlled data to influence database statements. Public sources describe the impact as potentially expos...

CVE-2022-3751 SQL Injection in owncast/owncast

SQL Injection in GitHub repository owncast/owncast prior to 0.0.13...

Cross-Site Scripting (XSS)

owncast/owncast is vulnerable to cross-site scripting. The vulnerability exists due to the lack of validation in chat field, allowing an attacker to inject and execute malicious javascript...

CVE-2021-39183

Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0.9 by blocking unsafe-inline Content Security Policy and specifying the script-src. The worker-sr...

CVE-2021-39183

Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0.9 by blocking unsafe-inline Content Security Policy and specifying the script-src. The worker-sr...

CVE-2021-39183

Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0.9 by blocking unsafe-inline Content Security Policy and specifying the script-src. The worker-sr...

Buffer overflow

Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0.9 by blocking unsafe-inline Content Security Policy and specifying the script-src. The worker-sr...

CVE-2021-39183 Unsafe inline XSS Owncast

Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0.9 by blocking unsafe-inline Content Security Policy and specifying the script-src. The worker-sr...

CVE-2021-39183

CVE-2021-39183 affects Owncast (open source self-hosted live video streaming and chat server). The issue arises when inline scripts execute during paste actions. The description notes a patch in version 0.0.9 that blocks unsafe-inline CSP and specifies a script-src policy, and requires worker-src...

PT-2021-22441 · Owncast · Owncast

Name of the Vulnerable Software and Affected Versions: Owncast versions prior to 0.0.9 Description: The issue concerns the execution of inline scripts when Javascript is parsed via a paste action in the chat server. This can lead to the execution of malicious scripts. The problem is resolved by...

Owncast 跨站脚本漏洞

Owncast is an open source, self-hosted, decentralized, single-user real-time video streaming and chat server. A cross-site scripting vulnerability exists in Owncast, which in affected versions executes inline script when parsing Javascript via a paste operation...