Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A Cross-Site Request Forgery (CSRF) vulnerability in Wowza Streaming Engine through 4.8.11+5 allows a remote attacker to delete a user account via the /enginemanager/server/user/delete.htm userName parameter. The application does not implement a CSRF token for the GET request. This issue was resolved in Wowza Streaming Engine release 4.8.14.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Wowza Media Systems Wowza Streaming Engine 跨站请求伪造漏洞
Vulnerability Description
Wowza Media Systems Wowza Streaming Engine是美国Wowza Media Systems公司的一个强大的、可定制的和可扩展的媒体服务器软件。用于将高质量视频和音频可靠地流式传输到任何地方的任何设备。 Wowza Streaming Engine 4.8.11+5 版本及之前版本存在跨站请求伪造漏洞，远程攻击者可利用该漏洞通过/enginemanager/server/user/delete.htm userName参数删除用户帐户。
CVSS Information
N/A
Vulnerability Type
N/A