CVE-2024-50395

MEDIUM Year: 2024
Weakness Type
CWE-639
View all →

Vulnerability Description

An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.6 ( 2024/08/02 ) and later

Related Vulnerabilities

CVE-2024-45032

CRITICAL
CVSS:10.0(Critical)

A vulnerability has been identified in Industrial Edge Management Pro (All versions < V1.9.5), Industrial Edge Management Virtual (All versions < V2.3.1-1). Affected components do not properly validat...

CWE-6392024

CVE-2022-1810

CRITICAL
CVSS:9.9(Critical)

Authorization Bypass Through User-Controlled Key in GitHub repository publify/publify prior to 9.2.9.

CWE-6392022

CVE-2019-12866

CRITICAL
CVSS:9.8(Critical)

An Insecure Direct Object Reference, with Authorization Bypass through a User-Controlled Key, was possible in JetBrains YouTrack. The issue was fixed in 2018.4.49168.

CWE-6392019

CVE-2019-13360

CRITICAL
CVSS:9.8(Critical)

In CentOS-WebPanel.com (aka CWP) CentOS Web Panel 0.9.8.836, remote attackers can bypass authentication in the login process by leveraging knowledge of a valid username.

CWE-6392019

CVE-2019-15913

CRITICAL
CVSS:9.8(Critical)

An issue was discovered on Xiaomi DGNWG03LM, ZNCZ03LM, MCCGQ01LM, WSDCGQ01LM, RTCGQ01LM devices. Because of insecure key transport in ZigBee communication, causing attackers to gain sensitive informat...

CWE-6392019

CVE-2019-9756

CRITICAL
CVSS:9.8(Critical)

An issue was discovered in GitLab Community and Enterprise Edition 10.x (starting from 10.8) and 11.x before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Incorrect Access Control, a...

CWE-6392019