Vulnerabilidades do AVideo AVideo Platform
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam AVideo AVideo Platform: 3 registro(s), com versões afetadas e correções.
CVE-2020-37173
Alta · 7.5
CWE-359 11/02/2026
AVideo Platform 8.1 - Information Disclosure (User Enumeration)
AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can retrieve sensitive user information including email, password hash, and administrative status by manipulating the users_id parameter.
CVE-2020-37172
Crítica · 9.8
CWE-640 11/02/2026
AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)
AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can craft malicious requests to the recoverPass endpoint using the user's recovery token to change account credentials without authentication.
CVE-2020-37158
Alta · 8.8
CWE-352 11/02/2026
AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)
AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can craft malicious requests to the recoverPass endpoint using the user's recovery token to change account credentials without authentication.