Vulnerability — CVE-2023-49864

CVE-2023-49864

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2023-49864
Description:: An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.This vulnerability is triggered by the `downloadURL_image` parameter.
Last updated date:: 01/16/2024

Type:: exploit
Confidence:: HIGH
Date of publishing:: 01/16/2024
Reference url to background: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1880