CVE-2020-37172 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechan…
High CVSS: 8.5

CVE-2020-37172

AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can craft malicious requests to the recoverPass endpoint using the user's recovery token to change account credentials without authentication.
Vendor
Wwbn
Product
Avideo
CWE
CWE-640
Yayın Tarihi
2026-02-11 21:16:09
Güncelleme
2026-02-18 19:37:05
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-640 Avideo HIGH Wwbn 2026

Referanslar

https://avideo.com https://github.com/WWBN/AVideo https://www.exploit-db.com/exploits/48003 https://www.vulncheck.com/advisories/avideo-platform-cross-site-request-forgery-password-reset