CVE-2024-29882
Assigner: GitHub_M
Published: 2024-03-28T13:33:42.500Z
State: PUBLISHED
title: SRS DOM - XSS on JSONP callback
problemTypes: descriptions: cweId: CWE-79
description: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
type: CWE
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: NONE
scope: CHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
version: 3.1
affected: vendor: ossrs
product: srs
versions: version: < 5.0.210
status: affected
version: >= 6.0.0, < 6.0.121
status: affected
descriptions: value: SRS is a simple, high-efficiency, real-time video server. SRS's `/api/v1/vhosts/vid-<id>?callback=<payload>` endpoint didn't filter the callback function name which led to injecting malicious javascript payloads and executing XSS ( Cross-Site Scripting). This vulnerability is fixed in 5.0.210 and 6.0.121.
source: advisory: GHSA-gv9r-qcjc-5hj7
discovery: UNKNOWN