← CVE Intelligence

CVE-2023-49864

WWBN / AVideo PUBLISHED

Description (CNA)

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.This vulnerability is triggered by the `downloadURL_image` parameter.

Affected (CNA)

Vendor / productVersions
WWBN / AVideoaffected dev master commit 15fed957fb

CWE

CWE-73

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.