CVE-2024-52052
Nov. 21, 2024, 11:15 p.m.
Tags
Product(s) Impacted
Wowza Streaming Engine
- below 4.9.1
Description
Wowza Streaming Engine below 4.9.1 permits an authenticated Streaming Engine Manager administrator to define a custom application property and poison a stream target for high-privilege remote code execution.
Weaknesses
CWE-646
Reliance on File Name or Extension of Externally-Supplied File
The product allows a file to be uploaded, but it relies on the file name or extension of the file to determine the appropriate behaviors. This could be used by attackers to cause the file to be misclassified and processed in a dangerous fashion.
CWE ID: 646Date
Published: Nov. 21, 2024, 11:15 p.m.
Last Modified: Nov. 21, 2024, 11:15 p.m.
Status : Received
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve@rapid7.com