CVE-2021-41764

Streama (self-hosted streaming server) has a CSRF vulnerability (CVE-2021-41764) affecting version up to v1.10.3. The issue arises because CSRF checks are not performed when performing actions such as uploading local files, enabling an attacker to induce a logged-in administrator to upload arbitr...