PT-2024-23106 · Srs · Srs

Antqt · Published 2024-03-28 · Updated 2024-03-28 · CVE-2024-29882

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SRS versions prior to 5.0.210 SRS versions prior to 6.0.121

Description The issue concerns SRS, a simple, high-efficiency, real-time video server. Specifically, the /api/v1/vhosts/vid-<id>?callback=<payload> endpoint did not filter the callback function name, leading to the injection of malicious JavaScript payloads and the execution of Cross-Site Scripting (XSS).

Recommendations For versions prior to 5.0.210, update to version 5.0.210 or later. For versions prior to 6.0.121, update to version 6.0.121 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-29882

GHSA-GV9R-QCJC-5HJ7

Affected Products

Srs

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/29xxx/CVE-2024-29882.json · Exploit
• https://github.com/ossrs/srs/commit/244ce7bc013a0b805274a65132a2980680ba6b9d · Patch
• https://github.com/ossrs/srs/security/advisories/GHSA-gv9r-qcjc-5hj7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-29882 · Security Note
• https://osv.dev/vulnerability/CVE-2024-29882 · Vendor Advisory
• https://twitter.com/CVEnew/status/1773347426427978151 · Twitter Post