Lucene search
K

4 matches found

Github Security Blog
Github Security Blog
added 2024/08/05 9:29 p.m.7 views

gotortc Cross-site Scripting vulnerability

gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The links page links.html appends the src GET parameter 0 in all of its links for 1-click previews. The context in which src is being appended is innerHTML 1, which will insert th...

6.1CVSS6.3AI score0.00181EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2024/08/05 9:29 p.m.10 views

GHSA-WV8X-3W6R-6H7V gotortc Cross-site Scripting vulnerability

gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The links page links.html appends the src GET parameter 0 in all of its links for 1-click previews. The context in which src is being appended is innerHTML 1, which will insert th...

6.1CVSS5.9AI score0.00181EPSS
Exploits1References4
GitLab Advisory Database
GitLab Advisory Database
added 2024/08/05 12:0 a.m.15 views

gotortc Cross-site Scripting vulnerability

gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The links page links.html appends the src GET parameter 0 in all of its links for 1-click previews. The context in which src is being appended is innerHTML 1, which will insert th...

6.1CVSS6.3AI score0.00181EPSS
Exploits1References5Affected Software1
Veracode
Veracode
added 2024/04/05 6:56 a.m.13 views

Cross-Site Scripting (XSS)

github.com/alexxit/go2rtc is vulnerable for Cross-Site Scripting XSS. The vulnerability due to the links.html page appending the src GET parameter in all of its links for 1-click previews, where the context of appending is innerHTML, leading to the insertion of the text as HTML which results in X...

6.1CVSS6.2AI score0.00181EPSS
Exploits1References2Affected Software1
Rows per page
Query Builder