Lucene search
HistoryJan 10, 2024 - 4:15 p.m.
CVE-2023-49738
cve-2023-49738
http request
arbitrary file read
information disclosure
image404raw.php
wwbn avideo
dev master commit 15fed957fb
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
26.7%
An information disclosure vulnerability exists in the image404Raw.php functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.
Affected configurations
Node
wwbnavideoMatch15fed957fb
Related
prion
prion
Information disclosure
2024-01-10 16:15:00
cvelist
cvelist
CVE-2023-49738
2024-01-10 15:48:11
cve
cve
CVE-2023-49738
2024-01-10 16:15:48
talos
talos
WWBN AVideo image404Raw.php information disclosure vulnerability
2024-01-10 00:00:00
talosblog
talosblog
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
26.7%
Related for NVD:CVE-2023-49738