Skip to content
OpenAdvisories

Package · Go

github.com/DatanoiseTV/tinyice

1 known vulnerabilities.

1 result · Feed

  • High 8.2

    TinyIce: Missing authentication on WebRTC ingest endpoint allows unauthorized stream injection

    TinyIce is a streaming server for audio and video. In versions 0.8.95 through 2.4.1, missing authentication on WebRTC ingest endpoint allows unauthenticated stream injection. Version 2.5.0 fixes the issue by requiring either HTTP Basic auth or a `?password=` …