koush/scrypted

koush/scrypted

Releases99

Frequency1 week 2 days

Last Release 7 months ago

Stars5.73K

Scrypted is a high performance video integration and automation platform

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-47620 ↗	Dec 13, 2023Wednesday, 13 December 2023, 22:15	6.1 MEDIUM	—
Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability exists in the plugin-http.ts file via the `owner' and 'pkg` parameters. An attacker can run arbitrary JavaScript code.
CVE-2023-47623 ↗	Dec 13, 2023Wednesday, 13 December 2023, 22:15	6.1 MEDIUM	—
Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability exists in the login page via the `redirect_uri` parameter. By specifying a url with the javascript scheme (`javascript:`), an attacker can run arbitrary JavaScript code after the login.