CVE-2020-23490

There was a local file disclosure vulnerability in AVideo < 8.9 via the proxy streaming

published November 16, 2020

CVSS
—
EPSS
3%
Percentile
85.4
In the wild
Unconfirmed
What it is

There was a local file disclosure vulnerability in AVideo < 8.9 via the proxy streaming. An unauthenticated attacker can exploit this issue to read an arbitrary file on the server. Which could leak database credentials or other sensitive information such as /etc/passwd file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02623 · 85.4th percentile
Published
2020-11-16T17:03Z
EPSS history
Timeline
  • 16 NOV 17:03Z
    There was a local file disclosure vulnerability in AVideo < 8.9 via the proxy streaming
    cvelistv5