CVE-2023-49863

Summary

CVE-2023-49863 is an information disclosure vulnerability affecting the aVideoEncoderReceiveImage.json.php script in WWBN AVideo's dev master commit 15fed957fb. A maliciously crafted HTTP request can exploit this flaw, resulting in arbitrary file reading. The vulnerability is triggered through the `downloadURL_webpimage` parameter. This issue could potentially grant attackers access to sensitive data, posing a significant risk to affected systems.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.