C21 Live Encoder and Live Mosaic vulnerabilities

2 known vulnerabilities in C21 Live Encoder and Live Mosaic from Cires21. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  C21 Live Encoder and Live Mosaic: Unrestricted Upload of File with Dangerous Type

  CVE-2024-0643Jan 17, 2024Cires21

  Unrestricted upload of dangerous file types in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to upload different file extensions without any restrictions, resulting in a full system compromise.

• 9.8 Critical severity

  C21 Live Encoder and Live Mosaic: Improper Access Control

  CVE-2024-0642Jan 17, 2024Cires21

  Inadequate access control in the C21 Live Encoder and Live Mosaic product, version 5.3. This vulnerability allows a remote attacker to access the application as an administrator user through the application endpoint, due to lack of proper credential management