koush/scrypted

koush/scrypted

GitHubGitHub
GitHubgithub.com
scrypted.appscrypted.app
Releases99
Frequency1 week 2 days
Last Release
Stars5.82K
Scrypted is a high performance video integration and automation platform
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2023-47620NVD↗
= *, <= 0.55.06.1 MEDIUM—

Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability exists in the plugin-http.ts file via the `owner' and 'pkg` parameters. An attacker can run arbitrary JavaScript code.

CVE-2023-47623NVD↗
= *, <= 0.55.06.1 MEDIUM—

Scrypted is a home video integration and automation platform. In versions 0.55.0 and prior, a reflected cross-site scripting vulnerability exists in the login page via the `redirect_uri` parameter. By specifying a url with the javascript scheme (`javascript:`), an attacker can run arbitrary JavaScript code after the login.