CVE-2024-46054

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

CVE-2024-46055

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

CVE-2024-46054

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

CVE-2024-46055

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

CVE-2024-46054

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

CVE-2024-46055

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

OpenVidReview 跨站脚本漏洞

OpenVidReview is a collaborative video review and annotation tool by the individual developer davidguva. A cross-site scripting vulnerability exists in OpenVidReview version 1.0, which stems from vulnerability to cross-site scripting attacks in the review name...

OpenVidReview 安全漏洞

OpenVidReview is a collaborative video review and annotation tool by the individual developer davidguva. A security vulnerability exists in version 1.0 of OpenVidReview, which stems from the /upload route being accessible without authentication, making it vulnerable to false access control attack...

CVE-2024-46054

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

CVE-2024-46054

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

CVE-2024-46055

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

CVE-2024-46055

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

CVE-2024-46054

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

PT-2024-31891 · Unknown · Openvidreview

Name of the Vulnerable Software and Affected Versions: OpenVidReview version 1.0 Description: The issue concerns incorrect access control. Specifically, the "/upload" API endpoint is accessible without authentication, allowing any user to upload files. Recommendations: For OpenVidReview version...

CVE-2024-46055: Improper Neutralization of Input During Web Page Generation

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

CVE-2024-46054

OpenVidReview version 1.0 is vulnerable to Incorrect Access Control due to a lack of authentication on the /upload route. This flaw allows any user to upload files to the platform. As a remediation, it is recommended to restrict the endpoint to require authentication or, as a temporary workaround...

CVE-2024-46054: Incorrect Default Permissions

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

PT-2024-31892 · Unknown · Openvidreview

Name of the Vulnerable Software and Affected Versions: OpenVidReview version 1.0 Description: The issue is related to Cross Site Scripting XSS in review names. This means an attacker could potentially inject malicious scripts into review names, which could then be executed by the browser of anoth...

CVE-2024-46055

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

CVE-2024-46055

OpenVidReview version 1.0 is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input within review names . An attacker could inject malicious scripts that execute in another user's browser, potentially leading to stolen user data or session hijacking . At this time, there...