Threats tagged 'ghsa-wqhv-cqq5-jhqj'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	–	CVE-2026-117373janus-gateway · Janus WebRTC Server 1.2.3 through 1.4.0 is vulnerable to Directory Traversal High2026-11-11GCVE DatabaseCVE-2026-117373 Janus WebRTC Server versions 1.2.3 through 1.4.0 contain a directory traversal vulnerability. The server accepts a user-supplied media path for ondemand streams, validating only the file extension without canonicalization or directory allowlisting. This allows unauthenticated users to cause the server to open arbitrary local files and stream their content as RTP audio. Report on CVE-2026-117373 Vulnerability #ghsa-wqhv-cqq5-jhqj	GCVE Database	2026-11-11

Page 1 of 1