Vulnerability · Published Apr 4, 2024 · Assigned by GitHub_M

CVE-2024-29191GHSL-2023-205 gotortc DOM-based Cross-site Scripting vulnerability

Medium 6.1

In plain English

A medium-severity cross-site scripting in go2rtc from AlexxIT. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 39% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.1Medium

Exploit odds (30 days)0.4%top 60.9% of all CVEs

Exploited in the wildNo reportsCISA SSVC: poc

Attack toolingNoneno public tooling known

Official description

gotortc is a camera streaming application. Versions 1.8.5 and prior are vulnerable to DOM-based cross-site scripting. The links page (`links.html`) appends the `src` GET parameter (`[0]`) in all of its links for 1-click previews. The context in which `src` is being appended is `innerHTML` (`[1]`), which will insert the text as HTML. Commit 3b3d5b033aac3a019af64f83dec84f70ed2c8aba contains a patch for the issue.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Go	github.com/AlexxIT/go2rtc	1.9.0	GHSA-wv8x-3w6r-6h7v
Go	github.com/AlexxIT/go2rtc	1.9.0	GO-2024-3055

Affected products (as reported)

Vendor	Product	Versions
AlexxIT	go2rtc	<= 1.8.5

Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References

https://securitylab.github.com/advisories/GHSL-2023-205_GHSL-2023-207_go2rtc/ x_refsource_CONFIRM
https://github.com/AlexxIT/go2rtc/commit/3b3d5b033aac3a019af64f83dec84f70ed2c8aba x_refsource_MISC