critical9.8
CVE-2024-46054
OpenVidReview 1.0 is vulnerable to Incorrect Access Control.
Impact
OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Davidguva | Openvidreview | Version 1.0 |