CVE-2023-34105

HIGHNuclei

SRS has command injection vulnerability in demonstration api-server for HTTP callback.

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-34105 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

SRS is a real-time video server supporting RTMP, WebRTC, HLS, HTTP-FLV, SRT, MPEG-DASH, and GB28181. Prior to versions 5.0.157, 5.0-b1, and 6.0.48, SRS's `api-server` server is vulnerable to a drive-by command injection. An attacker may send a request to the `/api/v1/snapshots` endpoint containing any commands to be executed as part of the body of the POST request. This issue may lead to Remote Code Execution (RCE). Versions 5.0.157, 5.0-b1, and 6.0.48 contain a fix.

Description source: CVE List

Exploitation context

Known exploitation

VulnCheck KEV
Listed · Aug 17, 2025 · VulnCheck
Reported exploitation
Observed · VulnCheck

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 3, 2025 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

simple_realtime_server

Browse ossrs / simple_realtime_server
VulnCheckVersion data not supplied

srs

Browse ossrs / srs
CVE List>= 5.0.137, < 5.0.157affected
>= 6.0.18, < 6.0.48affected
< 5.0-b1affected

Nuclei templates

1
ProjectDiscoveryHIGHSRS - Command InjectionCVSS 7.5

SRS's v5.0.137~v5.0.156, v6.0.18~v6.0.47 api-server server is vulnerable to a drive-by command injection.

Impact

Unauthenticated attackers with user interaction can inject commands through the app parameter in the snapshots API to execute arbitrary commands on the SRS streaming server.

Remediation

Update SRS (Simple Realtime Server) to a version newer than v5.0.156 or v6.0.47 that properly sanitizes input in the api-server snapshots endpoint.

WeaknessesCWE-77CWE-78
Authorsiamnoooob, rootxharsh, pdresearch
Template tagscvecve2023srsrceoastvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:ossrs:simple_realtime_server:*:*:*:*:*:*:*:*
Shodan: http.favicon.hash:1386054408
https://github.com/ossrs/srs/security/advisories/GHSA-vpr5-779c-cx62 https://github.com/ossrs/srs/blob/1d11d02e4b82fc3f37e4b048cff483b1581482c1/trunk/research/api-server/server.go#L761

Source: ProjectDiscovery

References

3