Wowza Media Systems Streaming Engine 跨站脚本漏洞

漏洞信息详情

Wowza Media Systems Streaming Engine是美国Wowza Media Systems公司的一套流媒体服务器软件。

Wowza Media Systems Streaming Engine 4.8.5之前版本中存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://www.wowza.com/docs/wowza-streaming-engine-4-8-5-release-notes

来源:MISC

链接:https://www.wowza.com/products/streaming-engine

来源:MISC

链接:https://www.wowza.com/docs/wowza-streaming-engine-4-8-5-release-notes

来源:MISC

链接:https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/master/wowza-streaming-engine/CVE-2019-19453.txt

来源:MISC

链接:https://www.gruppotim.it/redteam

来源:MISC

链接:https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2019-19453.txt

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-19453

暂无