Security Advisory

CVE-2022-28710

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-08-22 18:22:30
Last updated 2025-04-15 18:52:06
Assigner talos
State PUBLISHED

Description

An information disclosure vulnerability exists in the chunkFile functionality of WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.