owncast/owncast on GitHub
Take control over your live stream video by running it yourself. Streaming + chat out of the box.
CVE History
CVE | Published | CVSS v2 | CVSS v3 |
---|---|---|---|
CVE-2024-29026 | N/A | N/A | |
Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. In versions 0.1.2 and prior, a lenient CORS policy allows attackers to make a cross origin request, reading privileged information. This can be used to leak the admin password. Commit 9215d9ba0f29d62201d3feea9e77dcd274581624 fixes this issue. | |||
CVE-2023-46480 | 9.8 CRITICAL | N/A | |
An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth function. | |||
CVE-2023-3188 | 6.5 MEDIUM | N/A | |
Server-Side Request Forgery (SSRF) in GitHub repository owncast/owncast prior to 0.1.0. | |||
CVE-2022-3751 | 9.8 CRITICAL | N/A | |
SQL Injection in GitHub repository owncast/owncast prior to 0.0.13. | |||
CVE-2021-39183 | 6.1 MEDIUM | 4.3 MEDIUM | |
Owncast is an open source, self-hosted live video streaming and chat server. In affected versions inline scripts are executed when Javascript is parsed via a paste action. This issue is patched in 0.0.9 by blocking unsafe-inline Content Security Policy and specifying the script-src. The worker-src is required to be set to blob for the video player. |