Описание
An information disclosure vulnerability exists in the aVideoEncoder.json.php chunkFile path functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:wwbn:avideo:11.6:*:*:*:*:*:*:*
cpe:2.3:a:wwbn:avideo:15fed957fb:*:*:*:*:*:*:*
EPSS
Процентиль: 54%
0.00309
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-73
NVD-CWE-Other
Связанные уязвимости
CVSS3: 6.5
github
около 2 лет назад
An information disclosure vulnerability exists in the aVideoEncoder.json.php chunkFile path functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.
EPSS
Процентиль: 54%
0.00309
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-73
NVD-CWE-Other