CVE-2022-32769

creationtimestamp| type| source ---|---|--- 2022-08-22 22:20:49+00:00| seen| https://t.me/cibsecurity/48543 2025-04-15 18:54:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11886...

CVE-2022-32769

WWBN AVideo 11.6 and dev master commit 3f7c0364 contain authentication bypasses in object id handling. The TALOS advisory documents two flaws: (1) Live schedules and (2) PlayLists playlists can be created/modified using an id that may belong to another user, because ownership checks are missing. ...

CVE-2022-32769

Multiple authentication bypass vulnerabilities exist in the objects id handling functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request by an authenticated user can lead to unauthorized access and takeover of resources. An attacker can send an HTTP reque...