p PatchFirst

CVE-2024-31819

CVE-2024-31819

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execute arbitrary code via the systemRootPath parameter of the submitIndex.php component.

CVSS 9.8 · Critical · EPSS 15.6% · Public exploit · Fix available

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • wwbn/avideo Packagist

    Versions
    • 12.4
    Affected ranges
    • ECOSYSTEM: ≥ 12.4, < 14.3

    Update to 14.3

Original sources

Check your server →