CVE-2023-49738

Summary

CVE-2023-49738 is an information disclosure vulnerability affecting the WWBN AVideo dev master commit 15fed957fb. The image404Raw.php functionality in this commit is the source of the issue. A carefully crafted HTTP request can exploit this vulnerability, granting an attacker the ability to read arbitrary files on the affected system. This poses a significant risk, as sensitive data could be accessed and potentially misused. It is crucial for users to apply the necessary patches or upgrades to mitigate this vulnerability and protect their systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.