PRODUCT PROFILE

simple_realtime_server

暂无产品描述。

关联漏洞

共找到 2 条公开漏洞记录

高危CVE-2024-298822024/03/28

HTTP API DOM - XSS on JSONP callback

SRS is a simple, high-efficiency, real-time video server. SRS's `/api/v1/vhosts/vid-<id>?callback=<payload>` endpoint didn't filter the callback function name which led to injecting malicious javascript payloads and executing XSS ( Cross-Site Scripting). This vulnerability is fixed in 5.0.210 and 6.0.121.

simple_realtime_serverPoC 已收录

CVSS7.2EPSS 2.2%

高危CVE-2023-341052023/06/14

SRS - Command Injection

SRS's v5.0.137~v5.0.156, v6.0.18~v6.0.47 api-server server is vulnerable to a drive-by command injection.

simple_realtime_serverPoC 已收录

CVSS7.5EPSS 76.8%