CVE-2023-49864

6.5MEDIUM

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can le

发布于: 1/10/2024更新于: 11/4/2025
在NVD查看在MITRE查看

描述

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.This vulnerability is triggered by the `downloadURL_image` parameter.

AI分析AI驱动

受影响产品

wwbnavideo
dev_master_commit_15fed957fb

参考资料