Lucene search
PRIOn knowledge basePRION:CVE-2023-49589HistoryJan 10, 2024 - 4:15 p.m.
Design/Logic Flaw
2024-01-1016:15:00
PRIOn knowledge base
www.prio-n.com
2
entropy
vulnerability
user password recovery
http request
logic flaw
design flaw
wwbn avideo
An insufficient entropy vulnerability exists in the userRecoverPass.php recoverPass generation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to an arbitrary user password recovery. An attacker can send an HTTP request to trigger this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| avideo | eq | 15.0.0-fed957-fb |
Related
cve
cve
CVE-2023-49589
2024-01-10 16:15:48
talos
talos
cvelist
cvelist
CVE-2023-49589
2024-01-10 15:48:09
nvd
nvd
CVE-2023-49589
2024-01-10 16:15:48
talosblog
talosblog