GitHub Advisoryadvisory · Go

GHSA-392h-r46j-q24p OwnCast remote code execution vulnerability

MEDIUM Published 2023-11-28 Modified 2023-11-28 Official page ↗
Aliases
CVE-2023-46480
Ecosystem
Go
Packages
github.com/owncast/owncast
Severity
Moderate
Reviewed
2023-11-28

Affected packages

• Go github.com/owncast/owncast: <= 0.1.1 (no fix yet)

Description

An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth function.

Related

Alias · CVE (1)

  • CVE-2023-46480 An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter… vulnerability

References