CVE-2019-19453: XSS
Wowza Streaming Engine before 4.8.5 allows XSS (issue 1 of 2). An authenticated user, with access to the proxy license editing is able to insert a malicious payload that will be triggered in the main page of server settings. This issue was resolved in Wowza Streaming Engine 4.8.5.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-19453?
CVE-2019-19453 is a vulnerability in Wowza Streaming Engine before version 4.8.5 that allows for XSS attacks.
What is the severity of CVE-2019-19453?
The severity of CVE-2019-19453 is medium, with a CVSS score of 5.4.
How does CVE-2019-19453 affect Wowza Streaming Engine?
CVE-2019-19453 allows an authenticated user with access to the proxy license editing to insert a malicious payload that triggers an XSS attack on the main page of server settings in Wowza Streaming Engine before version 4.8.5.
How can I fix CVE-2019-19453?
To fix CVE-2019-19453, update Wowza Streaming Engine to version 4.8.5 or later.
Where can I find more information about CVE-2019-19453?
More information about CVE-2019-19453 can be found in the official Wowza Streaming Engine 4.8.5 release notes.