WWBN AVideo recovery notification bypass vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-50172 · ADVISORY
• WWBN/AVideo commit 15fed95 · WEB
• WWBN/AVideo · PACKAGE
• talosintelligence.com/vulnerability_reports/TALOS-2023-1897 · WEB
• talosintelligence.com/vulnerability_reports/TALOS-2023-1897

wwbn/avideo 的其他漏洞

• CVE-2026-55173高危 8.1WWBN AVideo is an open source video platform. Versions 29.0 and below remain vulnerable to OS command injection because the fix for CVE-2026…
• CVE-2026-33731中危 6.5WWBN AVideo is an open source video platform. In versions prior to 29.0, the Authorize.Net webhook handler at plugin/AuthorizeNet/webhook.ph…
• CVE-2026-33692高危 7.5WWBN AVideo is an open source video platform. Versions prior to 29.0 expose .env files to unauthenticated users through the official Docker …
• CVE-2026-49279高危 7.7WWBN AVideo is an open source video platform. Versions 29.0 and below contain a Stored XSS vulnerability through the autoEvalCodeOnHTML para…
• CVE-2026-33684中危 5.3WWBN AVideo is an open source video platform. Prior to version 29.0, Privilege Escalation is possible through unguarded permission parameter…