Skip to content
OpenAdvisories

Vendor

OSSRS

3 known vulnerabilities.

Products

srs 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.3
    CVE-2026-105486

    OSSRS srs System API api.go systemAPI.Run missing authentication

    A vulnerability was detected in OSSRS srs up to 7.0-a1. This affects the function systemAPI.Run of the file internal/proxy/api.go of the component System API. Performing a manipulation results in missing authentication. It is possible to initiate the attack r…

    OSSRS srs
  • High 7.2
    CVE-2024-29882

    SRS DOM - XSS on JSONP callback

    SRS is a simple, high-efficiency, real-time video server. SRS's `/api/v1/vhosts/vid-<id>?callback=<payload>` endpoint didn't filter the callback function name which led to injecting malicious javascript payloads and executing XSS ( Cross-Site Scripting). This…

    OSSRS srs
  • High 7.5
    CVE-2023-34105 Scanner template

    SRS has command injection vulnerability in demonstration api-server for HTTP callback.

    SRS is a real-time video server supporting RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH, and GB28181. Prior to versions 5.0.157, 5.0-b1, and 6.0.48, SRS's `api-server` server is vulnerable to a drive-by command injection. An attacker may send a request to the …

    OSSRS srs