← CVE Intelligence

CVE-2023-30854

WWBN AVideo vulnerable to OS Command Injection PUBLISHED

Description (CNA)

AVideo is an open source video platform. Prior to version 12.4, an OS Command Injection vulnerability in an authenticated endpoint `/plugin/CloneSite/cloneClient.json.php` allows attackers to achieve Remote Code Execution. This issue is fixed in version 12.4.

Affected (CNA)

Vendor / productVersions
WWBN / AVideoaffected < 12.4

CWE

CWE-78

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.