~ / search / GHSA-34hv-f45p-4qfq

GHSA-34hv-f45p-4qfq

Open redirect in wwbn/avideo

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-27463

Packages

EcosystemPackageAffectedFixed in
Packagist wwbn/avideo <= 11.6 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Open redirect vulnerability in objects/login.json.php in WWBN AVideo through 11.6, allows attackers to arbitrarily redirect users from a crafted url to the login page. A patch is available on the `master` branch of the repository.

References

External links from the advisory. They lead to third-party sites.