CVE-2023-49863: Wwbn Avideo

Medium severity, CVSS 6.5. EPSS: 1.1% chance of exploitation in the next 30 days.

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.This vulnerability is triggered by the `downloadURL_webpimage` parameter.

Affected products

• Wwbn Avideo: affected versions not specified

Published 2024-01-10. Last modified 2026-06-17.