CVE-2024-27488

ZLMediaKit versions 1.0 through 8.0 are vulnerable to an Incorrect Access Control issue. The application enables the http API interface by default and uses a secret parameter for authenticating the http restful API interface, but this secret is hardcoded by default . This flaw allows remote attac...