Description (CNA)
AVideo versions prior to 20.1 contain an open redirect vulnerability caused by insufficient validation of the siteRedirectUri parameter during user registration. Attackers can redirect users to external sites, facilitating phishing attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| World Wide Broadcast Network / AVideo | affected 0 before 20.1 |
CWE
CWE-601
References
- https://github.com/WWBN/AVideo/commit/4a53ab2056
- https://github.com/WWBN/AVideo/commit/77c70019b0
- https://www.vulncheck.com/advisories/avideo-open-redirect-via-siteredirecturi-parameter
- https://chocapikk.com/posts/2025/avideo-security-vulnerabilities/
ADP enrichment
No English description supplied.
No references supplied.