Lucene search
+L

28 matches found

OSV
OSV
•added 2021/09/29 8:15 p.m.•23 views

CVE-2021-41764

A cross-site request forgery CSRF vulnerability exists in Streama up to and including v1.10.3. The application does not have CSRF checks in place when performing actions such as uploading local files. As a result, attackers could make a logged-in administrator upload arbitrary local files via a...

8.8CVSS6.9AI score
SaveExploits0References3
NVD
NVD
•added 2021/09/29 8:15 p.m.•15 views

CVE-2021-41764

A cross-site request forgery CSRF vulnerability exists in Streama up to and including v1.10.3. The application does not have CSRF checks in place when performing actions such as uploading local files. As a result, attackers could make a logged-in administrator upload arbitrary local files via a...

8.8CVSS0.0071EPSS
SaveExploits1References3
Prion
Prion
•added 2021/09/29 8:15 p.m.•23 views

Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability exists in Streama up to and including v1.10.3. The application does not have CSRF checks in place when performing actions such as uploading local files. As a result, attackers could make a logged-in administrator upload arbitrary local files via a...

6.8CVSS8.5AI score0.0071EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2021/09/29 8:15 p.m.•9 views

CVE-2021-41764

A cross-site request forgery CSRF vulnerability exists in Streama up to and including v1.10.3. The application does not have CSRF checks in place when performing actions such as uploading local files. As a result, attackers could make a logged-in administrator upload arbitrary local files via a...

8.8CVSS7.3AI score0.0071EPSS
SaveExploits1References4
CVE
CVE
•added 2021/09/29 7:02 p.m.•59 views

CVE-2021-41764

Streama (self-hosted streaming server) has a CSRF vulnerability (CVE-2021-41764) affecting version up to v1.10.3. The issue arises because CSRF checks are not performed when performing actions such as uploading local files, enabling an attacker to induce a logged-in administrator to upload arbitr...

8.8CVSS8.6AI score0.0071EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/09/29 12:00 a.m.•6 views

CVE-2021-41764: Cross-Site Request Forgery (CSRF)

A cross-site request forgery CSRF vulnerability exists in Streama up to and including v1.10.3. The application does not have CSRF checks in place when performing actions such as uploading local files. As a result, attackers could make a logged-in administrator upload arbitrary local files via a...

8.8CVSS5.7AI score0.0071EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/09/29 12:00 a.m.•4 views

PT-2021-23398

Name of the Vulnerable Software and Affected Versions Streama versions up to and including 1.10.3 Description A cross-site request forgery CSRF vulnerability exists in the application. The application does not have CSRF checks in place when performing actions such as uploading local files. As a...

8.8CVSS0.0071EPSS
SaveExploits1References7
CNNVD
CNNVD
•added 2021/09/29 12:00 a.m.•16 views

Streama 跨站请求伪造漏洞

Streama is a self-hosted streaming media server. A cross-site request forgery vulnerability exists in Streama that stems from the product not performing reasonable checks when uploading local files. The vulnerability can be exploited to upload arbitrary files to the server.Streama v1.10.3 and...

8.8CVSS7.8AI score0.0071EPSS
SaveExploits1References4
Rows per page
Query Builder