CyberRota Analysis
AI-GeneratedAn arbitrary code execution vulnerability exists in OSSRS SRS versions prior to 5.0.213, allowing remote attackers to exploit RTMP publish authorization and vhost-level security configurations. This could lead to unauthorized access and control over the server, posing significant risks to the integrity and confidentiality of the system. Organizations using affected versions of OSSRS SRS should prioritize patching to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
An issue in OSSRS SRS (Simple Realtime Server) <v5.0.213 allows a remote attacker to execute arbitrary code via RTMP publish authorization, vhost-level security configuration (security.enabled), SrsSecurity::check(), trunk/src/app/srs_app_security.cpp, and SRS RTMP listener components