Chocapikk/CVE-2024-31819

Chocapikk/CVE-2024-31819

Releases0
Stars4
Unauthenticated Remote Code Execution (RCE) Vulnerability in WWBNIndex Plugin of AVideo Platform from 12.4 to 14.2

CVE History

CVEPublishedCVSS v3CVSS v2
9.8 CRITICAL

An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execute arbitrary code via the systemRootPath parameter of the submitIndex.php component.