koush/scrypted

koush/scrypted

Docker HubDocker Hub
Docker Hubhub.docker.com
Releases1.77K
Frequency18 hours 17 minutes
Last Release
Downloads13.4M
Stars66
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2023-47620NVD↗
= *, <= 0.55.06.1 MEDIUM—

Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability exists in the plugin-http.ts file via the `owner' and 'pkg` parameters. An attacker can run arbitrary JavaScript code.

CVE-2023-47623NVD↗
= *, <= 0.55.06.1 MEDIUM—

Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability exists in the login page via the `redirect_uri` parameter. By specifying a url with the javascript scheme (`javascript:`), an attacker can run arbitrary JavaScript code after the login.