CVE-2023-32073
CVE-2023-32073 · AVideo command injection vulnerability
This page contains facts from public vulnerability sources. Check the original advisory before updating.
WWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.json.php` which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-30854, which affects WWBN AVideo up to version 12.3. This issue is patched in commit 1df4af01f80d56ff2c4c43b89d0bac151e7fb6e3.
CVSS 8.8 · High · EPSS 6.5%
- Published
- Updated
Stack: php
Affected products and versions
avideo
- Versions
- <= 12.4: Affected
No fix published
wwbn/avideo Packagist
- Versions
- 10.4
- 10.8
- 11
- 11.1
- 11.1.1
- 11.5
- 11.6
- 12.4
- Affected ranges
- ECOSYSTEM: ≤ 12.4
No fix published