Beveiligingsadvies

CVE-2022-28710

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-08-22 18:22:30
Laatst bijgewerkt 2025-04-15 18:52:06
Toegewezen door talos
CVSS-score 6.5
Status PUBLISHED

Beschrijving

An information disclosure vulnerability exists in the chunkFile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.