~ / search / GHSA-392h-r46j-q24p

GHSA-392h-r46j-q24p

OwnCast remote code execution vulnerability

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-46480

Packages

EcosystemPackageAffectedFixed in
Go github.com/owncast/owncast <= 0.1.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth function.

References

External links from the advisory. They lead to third-party sites.