Skip to content

CVE-2017-16922 In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory structure and retrieval of a file are possible via a remote, specifically cra...

MediumCVSS 5.3 EPSS 1.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory structure and retrieval of a file are possible via a remote, specifically crafted HTTP request.

Affected products

ProductAffected versionsFixed in
Wowza Streaming Engine < 4.7.1 4.7.1

References