io.antmedia:ant-media-server (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package io.antmedia:ant-media-server, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2024-32656 — CVSS 7.8 (high): Ant Media Server is live streaming engine software. A local privilege escalation vulnerability in present in versions 2.6.0 through 2.8.2…
• CVE-2024-35371 — CVSS 7.5 (high): Ant-Media-Serverv2.8.2 is affected by Improper Output Neutralization for Logs. The vulnerability stems from insufficient input sanitization…
• CVE-2024-3462 — CVSS 5.4 (medium): Ant Media Server Community Edition in a default configuration is vulnerable to an improper HTTP header based authorization, leading to a…