Gabe Kangas

3 exploits Active since Jun 2023
CVE-2023-3188 WRITEUP MEDIUM WRITEUP
owncast < 0.1.0 - Server-Side Request Forgery
Server-Side Request Forgery (SSRF) in GitHub repository owncast/owncast prior to 0.1.0.
CVSS 6.5
CVE-2024-29026 WRITEUP HIGH WRITEUP
owncast < 0.1.2 - Unauthenticated Admin Password Leak via Lenient CORS Policy
Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. In versions 0.1.2 and prior, a lenient CORS policy allows attackers to make a cross origin request, reading privileged information. This can be used to leak the admin password. Commit 9215d9ba0f29d62201d3feea9e77dcd274581624 fixes this issue.
CVSS 8.2
CVE-2024-31450 WRITEUP LOW WRITEUP
owncast < 0.1.3 - Authenticated Path Traversal via Emoji Delete Endpoint
Owncast is an open source, self-hosted, decentralized, single user live video streaming and chat server. The Owncast application exposes an administrator API at the URL /api/admin. The emoji/delete endpoint of said API allows administrators to delete custom emojis, which are saved on disk. The parameter name is taken from the JSON request and directly appended to the filepath that points to the emoji to delete. By using path traversal sequences (../), attackers with administrative privileges can exploit this endpoint to delete arbitrary files on the system, outside of the emoji directory. This vulnerability is fixed in 0.1.3.
CVSS 2.7