Threats tagged 'ghsa-w4gr-g696-2mxp'

AzuraCast versions prior to 0.24.0 have a CRLF injection vulnerability that permits low-privilege station users with specific permissions to inject playlist entries. This is achieved by embedding carriage return and line feed sequences in mount or remote relay display_name values, allowing attackers to insert lines that redirect guest listeners to attacker-controlled streams under the victim station's name.