CVE-2024-29882

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-29882

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-29882.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-29882

Aliases

GHSA-gv9r-qcjc-5hj7

Published

2024-03-28T13:33:42.500Z

Modified

2026-04-12T09:49:32.056828Z

Severity

7.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N CVSS Calculator

Summary

SRS DOM - XSS on JSONP callback

Details

SRS is a simple, high-efficiency, real-time video server. SRS's /api/v1/vhosts/vid-<id>?callback=<payload> endpoint didn't filter the callback function name which led to injecting malicious javascript payloads and executing XSS ( Cross-Site Scripting). This vulnerability is fixed in 5.0.210 and 6.0.121.

Database specific

{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-79"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/29xxx/CVE-2024-29882.json"
}

References

Affected packages

Git / github.com/ossrs/srs

Affected ranges

Type: GIT
Repo: https://github.com/ossrs/srs
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

244ce7bc013a0b805274a65132a2980680ba6b9d

Type: GIT
Repo: https://github.com/ossrs/srs
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Fixed

244ce7bc013a0b805274a65132a2980680ba6b9d

Affected versions

v0.*

v0.1.0

v0.2.0

v0.3.0

v0.4.0

v0.5.0

v0.6.0

v0.7.0

v0.8.0

v0.9.0

v6.*

v6.0-d0

v6.0-d1

v6.0-d2

v6.0-d3

v6.0-d4

v6.0.10

v6.0.36

v6.0.45

v6.0.48

Database specific

vanir_signatures_modified

"2026-04-12T09:49:32Z"

vanir_signatures

[
    {
        "id": "CVE-2024-29882-094323cc",
        "target": {
            "file": "trunk/src/protocol/srs_protocol_http_conn.cpp"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "51331076260704782388217210023354136357",
                "212296809016094972470653598659566661353",
                "27929993880543800799733862745352639025",
                "221180860166256488453906821182588866426",
                "153482185210129231678574555006858481119",
                "98343271453330675262125054440273668624",
                "306028441414888796757303718790337975647",
                "209091840125063562187424494637493943060",
                "317442199544706622938477496081021741511",
                "68442070361506501621736883367351764626",
                "95723457923698245765128480367895454891",
                "335262093353938068893257561734285562251"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://github.com/ossrs/srs/commit/244ce7bc013a0b805274a65132a2980680ba6b9d",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2024-29882-dc66ef25",
        "target": {
            "file": "trunk/src/kernel/srs_kernel_error.hpp"
        },
        "deprecated": false,
        "digest": {
            "line_hashes": [
                "126123604150206928519426776614144614196",
                "169197213057109872522810241202788724393",
                "57766131618121208857558053770792752477",
                "59247926496317154915664063860174616185"
            ],
            "threshold": 0.9
        },
        "signature_type": "Line",
        "source": "https://github.com/ossrs/srs/commit/244ce7bc013a0b805274a65132a2980680ba6b9d",
        "signature_version": "v1"
    },
    {
        "id": "CVE-2024-29882-e2715aae",
        "target": {
            "file": "trunk/src/protocol/srs_protocol_http_conn.cpp",
            "function": "SrsHttpMessage::set_url"
        },
        "deprecated": false,
        "digest": {
            "function_hash": "111536652742290614265247733577924431419",
            "length": 748.0
        },
        "signature_type": "Function",
        "source": "https://github.com/ossrs/srs/commit/244ce7bc013a0b805274a65132a2980680ba6b9d",
        "signature_version": "v1"
    }
]

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-29882.json"

unresolved_ranges

[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "5.0.210"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "6.0.0"
            },
            {
                "fixed": "6.0.121"
            }
        ]
    }
]