CVE-2023-6605

High

A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the…

fedora·CWE-99·Published 2025-01-06

CVSS

7.2

EPSS

0.00

KEV

Exploits

cve.orgen

211 chars

A flaw was found in FFmpeg's DASH playlist support. This vulnerability allows arbitrary HTTP GET requests to be made on behalf of the machine running FFmpeg via a crafted DASH playlist containing malicious URLs.

NVDen

211 chars

NVDes

256 chars

Se encontró un fallo en FFmpeg's DASH playlist support. Esta vulnerabilidad permite que se realicen solicitudes HTTP GET arbitrarias en nombre de la máquina que ejecuta FFmpeg a través de una lista de reproducción DASH diseñada que contiene URL maliciosas.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	7.2	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
3.1	Primary	cve.org	7.2	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
3.1	Primary	cve.org	7.2	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
3.1	Primary	cve.org	7.2	—	—	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
3.1	Secondary	NVD	7.2	3.9	2.7	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
3.1	Secondary	NVD	7.2	3.9	2.7	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N