Описание
AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last login times, enabling user enumeration and privacy violations.
Уязвимые конфигурации
Конфигурация 1Версия до 20.0 (исключая)
cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*
EPSS
Процентиль: 97%
0.40739
Средний
7.5 High
CVSS3
Дефекты
CWE-359
Связанные уязвимости
CVSS3: 7.5
github
около 2 месяцев назад
AVideo versions prior to 20.0 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last login times, enabling user enumeration and privacy violations.
EPSS
Процентиль: 97%
0.40739
Средний
7.5 High
CVSS3
Дефекты
CWE-359