Advisories · Technology
AzuraCast.
Every CVE that names AzuraCast among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
AzuraCast before 0.24.0 Stored CSV Formula Injection via Bulk Media Export
- AzuraCast
- Other injection
- CVSS 5.1 Medium
AzuraCast before 0.24.0 CRLF Injection via Mount display_name in PLS Playlist
- AzuraCast
- Other injection
- CVSS 6.9 Medium
AzuraCast before 0.24.0 SSRF Filter Bypass via Webhook Connectors
- AzuraCast
- Server-side request forgery (SSRF)
- CVSS 5.3 Medium
AzuraCast before 0.24.0 Missing Authorization via Station Waveform Endpoints
- AzuraCast
- Broken access control
- CVSS 8.7 High
AzuraCast through 0.23.8 Command Injection via StereoTool Liquidsoap pipe()
- AzuraCast
- Command injection
- CVSS 8.7 High
AzuraCast through 0.23.8 RCE via Supervisor Configuration Injection in Timezone
- AzuraCast
- Code injection
- CVSS 8.7 High
AzuraCast through 0.23.8 Config Injection via frontend_config.custom_config
- AzuraCast
- CWE-15
- CVSS 8.2 High
AzuraCast before 0.23.8 On-Demand Download Endpoint Authorization Bypass
- AzuraCast
- Broken access control
- CVSS 8.7 High
AzuraCast before 0.23.8 Command Injection via Streamer Username
- AzuraCast
- Command injection
- CVSS 7.2 High
AzuraCast before 0.23.8 Broken Access Control via GET /api/station/{id}/vue/profile
- AzuraCast
- Information disclosure
- CVSS 4.8 Medium
AzuraCast before 0.23.8 SSRF and Local File Read via Remote Playlist
- AzuraCast
- Server-side request forgery (SSRF)
- CVSS 7.1 High
AzuraCast before 0.23.8 SSRF Filter Bypass via Hostname and Private IPs
- AzuraCast
- Server-side request forgery (SSRF)
- CVSS 7.1 High
AzuraCast before 0.23.8 Server-Side Request Forgery via Remote Relay URL
- AzuraCast
- Server-side request forgery (SSRF)
- CVSS 8.7 High
AzuraCast before 0.23.8 DQL Injection via sortOrder
- AzuraCast
- SQL injection
- CVSS 8.7 High
AzuraCast through 0.23.8 Liquidsoap Configuration Write via Profile Edit Serialization Group Bypass
- AzuraCast
- Code injection
- Broken access control