CVE-2025-34441
AVideo < 20.1 User Information Disclosure via Public API
Résumé
AVideo < 20.1 User Information Disclosure via Public API
Description d'origine
La description telle que publiée par la source (souvent en anglais).
AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last login times, enabling user enumeration and privacy violations.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- patch github.com
- patch github.com
- report chocapikk.com