vulnerability
Wowza Streaming Engine: CVE-2024-52055: Injection
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 6 | (AV:N/AC:L/Au:M/C:C/I:N/A:N) | Nov 20, 2024 | Nov 20, 2024 | Nov 20, 2024 |
Severity
6
CVSS
(AV:N/AC:L/Au:M/C:C/I:N/A:N)
Published
Nov 20, 2024
Added
Nov 20, 2024
Modified
Nov 20, 2024
Description
An injection permits an administrator user to read any file on the file system if the target directory contains an XML file.
Solution
wowza-streaming-engine-upgrade-4-9-1
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.