CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2018-7049
https://notcve.org/view.php?id=CVE-2018-7049
An issue was discovered in Wowza Streaming Engine before 4.7.1. There is an XSS vulnerability in the HTTP providers (com.wowza.wms.http.HTTPProviderMediaList and com.wowza.wms.http.streammanager.HTTPStreamManager) causing script injection and/or reflection via a crafted HTTP request. Se ha descubierto un problema en Wowza Streaming Engine, en versiones anteriores a la 4.7.1. Hay una vulnerabilidad de Cross-Site Scripting (XSS) en los proveedores HTTP (com.wowza.wms.http.HTTPProviderMediaList y com.wowza.wms.http.streammanager.HTTPStreamManager) que provocan la inyección y/o reflexión de scripts mediante una petición HTTP manipulada. • https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2018-7049.txt https://www.wowza.com/docs/wowza-streaming-engine-4-7-1-release-notes • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2018-7048
https://notcve.org/view.php?id=CVE-2018-7048
An issue was discovered in Wowza Streaming Engine before 4.7.1. There is a denial of service (memory consumption) via a crafted HTTP request. Se ha descubierto un problema en Wowza Streaming Engine, en versiones anteriores a la 4.7.1. Hay una denegación de servicio (consumo de memoria) mediante una petición HTTP manipulada. • https://raw.githubusercontent.com/WowzaMediaSystems/public_cve/main/wowza-streaming-engine/CVE-2018-7048.txt https://www.wowza.com/docs/wowza-streaming-engine-4-7-1-release-notes • CWE-400: Uncontrolled Resource Consumption •