Executive brief
AzuraCast/AzuraCast vulnerable to cross-site scripting
Affected products
- Packagist azuracast/azuracast
Junglewise Threat Intelligence
CVE-2023-2191: AzuraCast/AzuraCast vulnerable to cross-site scripting
CVE-2023-2191 · Severity: low · CVSS 3 · Published 2023-04-20
Technologies: azuracast/azuracast (Packagist). Vendors: Packagist.
Related threats
- AzuraCast password reset poisoning in ApplyXForwarded middleware
- AzuraCast path traversal and RCE in Flow.js media upload
- AzuraCast Vulnerable to Liquidsoap Code Injection via Incomplete cleanUpString-to-toRawString Migration in Remote Relay Password Field
- AzuraCast has Missing Permissions Check on Media File Download, Allowing Cross-Station Data Exfiltration
- AzuraCast's Missing RequireInternalConnection on Liquidsoap API Allows Low-Privilege Metadata Injection and Broadcast Disruption