Skip to content
OpenAdvisories

Product · DatanoiseTV

tinyice

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.2

    TinyIce: Missing authentication on WebRTC ingest endpoint allows unauthorized stream injection

    TinyIce is a streaming server for audio and video. In versions 0.8.95 through 2.4.1, missing authentication on WebRTC ingest endpoint allows unauthenticated stream injection. Version 2.5.0 fixes the issue by requiring either HTTP Basic auth or a `?password=` …