Reflected XSS Vulnerability in Wowza Streaming Engine Login Page
CVE-2019-19456

6.1MEDIUM

Key Information:

Vendor: Wowza
Status: Streaming Engine
Vendor: CVE Published:; 18 May 2020

What is CVE-2019-19456?

A Reflected XSS vulnerability exists in the Wowza Streaming Engine's login page, specifically within the server selection box. This flaw allows a malicious actor to execute arbitrary scripts in the context of the user's browser session by crafting a specially formatted URL. The issue affects versions of Wowza Streaming Engine prior to 4.8.0 and can lead to unauthorized actions taken on behalf of the user. Users are encouraged to upgrade to version 4.8.0 or later to mitigate this risk.