high7.5
CVE-2023-49738
An information disclosure vulnerability exists in the image404Raw.php functionality of WWBN AVideo dev master commit 15fed957fb.
Impact
An information disclosure vulnerability exists in the image404Raw.php functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wwbn | Avideo | Version 15fed957fb |