CVE-2025-34441
AVideo < 20.1 User Information Disclosure via Public API
概要
AVideo < 20.1 User Information Disclosure via Public API
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last login times, enabling user enumeration and privacy violations.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- patch github.com
- patch github.com
- report chocapikk.com