WWBN AVideo recovery notification bypass vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-50172 · ADVISORY
• WWBN/AVideo commit 15fed95 · WEB
• WWBN/AVideo · PACKAGE
• talosintelligence.com/vulnerability_reports/TALOS-2023-1897 · WEB
• talosintelligence.com/vulnerability_reports/TALOS-2023-1897

wwbn/avideo のその他の脆弱性

• CVE-2026-55173高 8.1WWBN AVideo is an open source video platform. Versions 29.0 and below remain vulnerable to OS command injection because the fix for CVE-2026…
• CVE-2026-33731中 6.5WWBN AVideo is an open source video platform. In versions prior to 29.0, the Authorize.Net webhook handler at plugin/AuthorizeNet/webhook.ph…
• CVE-2026-33692高 7.5WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenticated users through the official Docker …
• CVE-2026-49279高 7.7WWBN AVideo is an open source video platform. Versions 29.0 and below contain a Stored XSS vulnerability through the autoEvalCodeOnHTML para…
• CVE-2026-33684中 5.3WWBN AVideo is an open source video platform. Prior to version 29.0, Privilege Escalation is possible through unguarded permission parameter…