| Package | Affected versions | Patched versions |
|---|---|---|
| avideo | < 20.0 | 20.0 |
AVideo versions prior to 20.1 are vulnerable to an open redirect flaw due to missing validation of the cancelUri parameter during user login. An attacker can craft a link to redirect users to arbitrary external sites, enabling phishing attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free