Description

gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The links page (`links.html`) appends the `src` GET parameter (`[0]`) in all of its links for 1-click previews. The context in which `src` is being appended is `innerHTML` (`[1]`), which will insert the text as HTML. Commit 3b3d5b033aac3a019af64f83dec84f70ed2c8aba contains a patch for the issue.

INFO

Published Date :

2024-04-04T14:52:30.977Z

Last Modified :

2024-08-02T01:10:55.432Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2024-29191 vulnerability.

Vendors Products
Alexxit
  • Go2rtc
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2024-29191.

URL Resource
https://github.com/AlexxIT/go2rtc/commit/3b3d5b033aac3a019af64f83dec84f70ed2c8aba cve-icon cve-icon cve-icon
https://securitylab.github.com/advisories/GHSL-2023-205_GHSL-2023-207_go2rtc/ cve-icon cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact