Lucene search
HistoryAug 22, 2022 - 7:15 p.m.
CVE-2022-32761
information disclosure
avideoencoderreceiveimage
wwbn avideo 11.6
dev master commit
http request
arbitrary file read
vulnerability
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
30.1%
An information disclosure vulnerability exists in the aVideoEncoderReceiveImage functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.
Affected configurations
Node
wwbnavideoMatch11.6
Related
osv
osv
CVE-2022-32761
2022-08-22 19:15:10
cvelist
cvelist
CVE-2022-32761
2022-08-22 18:25:58
prion
prion
Information disclosure
2022-08-22 19:15:00
talos
talos
WWBN AVideo aVideoEncoderReceiveImage information disclosure vulnerability
2022-08-16 00:00:00
cve
cve
CVE-2022-32761
2022-08-22 19:15:10
talosblog
talosblog
CVSS3
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.001
Percentile
30.1%
Related for NVD:CVE-2022-32761