4 matches found
CVE-2026-110717
Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordingspath via the record request filename. Attackers can supply filenames with path separators to create or truncate files ending i...
CVE-2026-110717
The Janus WebRTC Server (versions through 1.4.3 ) contains a path traversal vulnerability within the Record&Play plugin . This flaw allows unauthenticated attackers to bypass the recordings_path restriction by supplying filenames with path separators during a record request. Consequently, attacke...
CVE-2026-110717 Janus WebRTC Server through 1.4.3 Path Traversal via Record&Play Filename
Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordingspath via the record request filename. Attackers can supply filenames with path separators to create or truncate files ending i...
EUVD-2026-101140
Janus WebRTC Server through 1.4.3 contains a path traversal vulnerability in the Record&Play plugin that allows unauthenticated attackers to write files outside recordingspath via the record request filename. Attackers can supply filenames with path separators to create or truncate files ending i...