CVE-2021-39183

CVE-2021-39183 affects Owncast (open source self-hosted live video streaming and chat server). The issue arises when inline scripts execute during paste actions. The description notes a patch in version 0.0.9 that blocks unsafe-inline CSP and specifies a script-src policy, and requires worker-src...

CVE-2021-39183: Improper Neutralization of Input During Web Page Generation

Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0.9 by blocking unsafe-inline Content Security Policy and specifying the script-src. The worker-sr...

PT-2021-22441 · Owncast · Owncast

Name of the Vulnerable Software and Affected Versions: Owncast versions prior to 0.0.9 Description: The issue concerns the execution of inline scripts when Javascript is parsed via a paste action in the chat server. This can lead to the execution of malicious scripts. The problem is resolved by...

Owncast 跨站脚本漏洞

Owncast is an open source, self-hosted, decentralized, single-user real-time video streaming and chat server. A cross-site scripting vulnerability exists in Owncast, which in affected versions executes inline script when parsing Javascript via a paste operation...