AVideo contains Command injection when embedding a video link

Mô tả

Tham khảo

• WWBN/AVideo security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2023-30842 · ADVISORY
• WWBN/AVideo commit 236228f · WEB
• WWBN/AVideo · PACKAGE

Lỗ hổng khác của wwbn/avideo

• CVE-2026-55173CAO 8.1WWBN AVideo is an open source video platform. Versions 29.0 and below remain vulnerable to OS command injection because the fix for CVE-2026…
• CVE-2026-33731TRUNG BÌNH 6.5WWBN AVideo is an open source video platform. In versions prior to 29.0, the Authorize.Net webhook handler at plugin/AuthorizeNet/webhook.ph…
• CVE-2026-33692CAO 7.5WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenticated users through the official Docker …
• CVE-2026-49279CAO 7.7WWBN AVideo is an open source video platform. Versions 29.0 and below contain a Stored XSS vulnerability through the autoEvalCodeOnHTML para…
• CVE-2026-33684TRUNG BÌNH 5.3WWBN AVideo is an open source video platform. Prior to version 29.0, Privilege Escalation is possible through unguarded permission parameter…