CVE-2023-47862: Wwbn Avideo

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

A local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send a series of HTTP requests to trigger this vulnerability.

Affected products

• Wwbn Avideo: version 15fed957fb only

Published 2024-01-10. Last modified 2026-06-17.