CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Broadcast Live Video videowhisper-live-streaming-integration allows Path Traversal.This issue affects Broadcast Live Video: from n/a through <= 6.2.
Explanation of Vulnerability in Simple Terms
Broadcast Live Video versions 6.2 and earlier contain a path traversal vulnerability that allows an unauthenticated attacker to cause a denial of service by making the application unavailable. The vulnerability requires no user interaction and can be exploited over the network. An update to a version newer than 6.2 is required to resolve this issue.
What an attacker can do
Make the application unavailable or unresponsive by exploiting a path traversal flaw.
Potential impact on your site
Your site using Broadcast Live Video may become unavailable or experience service disruption.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
