VYPR

Frigate

by Frigate

CVEs (2)

  • CVE-2023-45670HigOct 30, 2023
    risk 0.49cvss 7.5epss 0.00

    Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, the `config/save` and `config/set` endpoints of Frigate do not implement any CSRF protection. This makes it possible for a request sourced from another site to update the configuration of the…

  • CVE-2023-45671MedOct 30, 2023
    risk 0.31cvss 4.7epss 0.01

    Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, there is a reflected cross-site scripting vulnerability in any API endpoints reliant on the `/<camera_name>` base path as values provided for the path are not sanitized. Exploiting this…