UpHeron
All vulnerabilities

Servers and applications

CVE-2023-49589

An insufficient entropy vulnerability exists in the userRecoverPass.php recoverPass generation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to an arbitrary user password recovery. An attacker can send an HTTP request to trigger this vulnerability.

Severity
High 8.8
Published
10 Jan 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
AVideoServers and applications · cpe:a:wwbn:avideo
  • Version 15fed957fb

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-49589
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-49589