Vulnerabilities > CVE-2023-47171 - Unspecified vulnerability in Wwbn Avideo 11.6/15Fed957Fb

047910
CVSS 6.5 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
wwbn

Summary

An information disclosure vulnerability exists in the aVideoEncoder.json.php chunkFile path functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.

Vulnerable Configurations

Part Description Count
Application
Wwbn
2