CVE-2020-23489

The import.json.php file before 8.9 for Avideo is vulnerable to a File Deletion vulnerability

published November 16, 2020

CVSS
—
EPSS
2%
Percentile
83.4
In the wild
Unconfirmed
What it is

The import.json.php file before 8.9 for Avideo is vulnerable to a File Deletion vulnerability. This allows the deletion of configuration.php, which leads to certain privilege checks not being in place, and therefore a user can escalate privileges to admin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02329 · 83.4th percentile
Published
2020-11-16T17:04Z
EPSS history
Timeline
  • 16 NOV 17:04Z
    The import.json.php file before 8.9 for Avideo is vulnerable to a File Deletion vulnerability
    cvelistv5