Vendors / owncast Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now owncast records in CISA KEV No owncast vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority HIGH 82
An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth function.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01619 · Published 2023-11-27 · No fix listed CWE-94
Priority HIGH 76
SQL Injection in GitHub repository owncast/owncast prior to 0.0.13.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0102 · Published 2022-11-29 · Fixed in 0.0.13 CWE-89
Priority HIGH 68
Server-Side Request Forgery (SSRF) in GitHub repository owncast/owncast prior to 0.1.0.
CVSS 3.1 MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.01356 · Published 2023-06-10 · Fixed in 0.1.0 CWE-918
Priority MEDIUM 62
Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server.
CVSS 3.1 MEDIUM 6.5· Network · High privileges · No interaction · EPSS 0.00969 · Published 2024-04-19 · Fixed in 0.1.3 CWE-22
Priority LOW 39
Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server.
CVSS 3.1 CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00412 · Published 2024-03-20 · Fixed in 0.1.3 CWE-352
Priority LOW 37
Owncast is an open source, self-hosted live video streaming and chat server.
CVSS 3.1 HIGH 8.2· Network · Low privileges · User interaction · EPSS 0.00772 · Published 2021-12-14 · Fixed in 0.0.9 CWE-79
Open these records in search → All records by CVSS severity
Critical3 High1 Medium2 Low0 No CVSS0