CVE-2024-46054

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

CVE-2024-46055

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

CVE-2024-46055

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

CVE-2024-46054

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

CVE-2024-46055

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

CVE-2024-46054

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

CVE-2024-46054

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

CVE-2024-46055

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

CVE-2024-46054

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

PT-2024-31891 · Unknown · Openvidreview

Name of the Vulnerable Software and Affected Versions: OpenVidReview version 1.0 Description: The issue concerns incorrect access control. Specifically, the "/upload" API endpoint is accessible without authentication, allowing any user to upload files. Recommendations: For OpenVidReview version...

CVE-2024-46054: Incorrect Default Permissions

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

CVE-2024-46054

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files...

CVE-2024-46055

OpenVidReview version 1.0 is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input within review names . An attacker could inject malicious scripts that execute in another user's browser, potentially leading to stolen user data or session hijacking . At this time, there...

CVE-2024-46055

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

CVE-2024-46055

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

OpenVidReview Cross-Site Scripting Vulnerability

OpenVidReview is a collaborative video review and annotation tool by the individual developer davidguva. A cross-site scripting vulnerability exists in OpenVidReview version 1.0, which stems from vulnerability to cross-site scripting attacks in the review name...

CVE-2024-46055: Improper Neutralization of Input During Web Page Generation

OpenVidReview 1.0 is vulnerable to Cross Site Scripting XSS in review names...

CVE-2024-46054

OpenVidReview version 1.0 is vulnerable to Incorrect Access Control due to a lack of authentication on the /upload route. This flaw allows any user to upload files to the platform. As a remediation, it is recommended to restrict the endpoint to require authentication or, as a temporary workaround...

OpenVidReview security vulnerabilities

OpenVidReview is a collaborative video review and annotation tool by the individual developer davidguva. A security vulnerability exists in version 1.0 of OpenVidReview, which stems from the /upload route being accessible without authentication, making it vulnerable to false access control attack...

PT-2024-31892 · Unknown · Openvidreview

Name of the Vulnerable Software and Affected Versions: OpenVidReview version 1.0 Description: The issue is related to Cross Site Scripting XSS in review names. This means an attacker could potentially inject malicious scripts into review names, which could then be executed by the browser of anoth...