Cross site request forgery (csrf)

A cross-site request forgery CSRF vulnerability exists in Streama up to and including v1.10.3. The application does not have CSRF checks in place when performing actions such as uploading local files. As a result, attackers could make a logged-in administrator upload arbitrary local files via a...

CVE-2021-41764

Streama (self-hosted streaming server) has a CSRF vulnerability (CVE-2021-41764) affecting version up to v1.10.3. The issue arises because CSRF checks are not performed when performing actions such as uploading local files, enabling an attacker to induce a logged-in administrator to upload arbitr...

Streama 跨站请求伪造漏洞

Streama is a self-hosted streaming media server. A cross-site request forgery vulnerability exists in Streama that stems from the product not performing reasonable checks when uploading local files. The vulnerability can be exploited to upload arbitrary files to the server.Streama v1.10.3 and...