PT-2026-106307 · Ossrs · Srs
CVSS v2.0
7.5
عالية
| المتجه | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
OSSRS srs versions prior to 8.0-d0
Description
An issue exists in the System API component within the
systemAPI.Run() function of the internal/proxy/api.go file. A remote attacker can perform a manipulation that results in missing authentication, allowing unauthorized access to the system.Recommendations
Upgrade to version 8.0-d0.
As a temporary mitigation, restrict access to the
systemAPI.Run() function.استغلال
إصلاح
Missing Authentication
Improper Authentication
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾
المعرّفات ذات الصلة
المنتجات المتأثرة
Srs