Количество 2
Количество 2
CVE-2023-30854
почти 3 года назад
AVideo is an open source video platform. Prior to version 12.4, an OS Command Injection vulnerability in an authenticated endpoint `/plugin/CloneSite/cloneClient.json.php` allows attackers to achieve Remote Code Execution. This issue is fixed in version 12.4.
CVSS3: 8.8
EPSS: Средний
GHSA-6vrj-ph27-qfp3
почти 3 года назад
Remote code injection in wwbn/avideo
CVSS3: 8.8
EPSS: Средний
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2023-30854 AVideo is an open source video platform. Prior to version 12.4, an OS Command Injection vulnerability in an authenticated endpoint `/plugin/CloneSite/cloneClient.json.php` allows attackers to achieve Remote Code Execution. This issue is fixed in version 12.4. | CVSS3: 8.8 | 64% Средний | почти 3 года назад |
| GHSA-6vrj-ph27-qfp3 Remote code injection in wwbn/avideo | CVSS3: 8.8 | 64% Средний | почти 3 года назад |
Уязвимостей на страницу
20