CVE-2021-21286

Published February 1st, 2021

View on NVD ↗

CVSS v3

7.7

HIGH

CVSS v2

6.5

MEDIUM

Affected

PROJECT

Description

AVideo Platform is an open-source Audio and Video platform. It is similar to a self-hosted YouTube. In AVideo Platform before version 10.2 there is an authorization bypass vulnerability which enables an ordinary user to get admin control. This is fixed in version 10.2. All queries now remove the pass hash and the recoverPass hash.

WWBN/AVideo

Create Your Own Broadcast Network With AVideo Platform Open-Source. OAVP OVP

GitHub

2.1K