Beveiligingsadvies

CVE-2026-35452

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-04-06 21:47:45

Laatst bijgewerkt 2026-04-08 14:08:17

Toegewezen door GitHub_M

CVSS-score 5.3

Status PUBLISHED

Beschrijving

WWBN AVideo is an open source video platform. In versions 26.0 and prior, the plugin/CloneSite/client.log.php endpoint serves the clone operation log file without any authentication. Every other endpoint in the CloneSite plugin directory enforces User::isAdmin(). The log contains internal filesystem paths, remote server URLs, and SSH connection metadata.

← Alle CVE's bekijken Bekijk op cve.org ↗