Beveiligingsadvies

CVE-2026-59704

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-07 22:18:48

Laatst bijgewerkt 2026-07-20 17:45:58

Toegewezen door VulnCheck

CVSS-score 7.1

Status PUBLISHED

Beschrijving

Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metadata including titles, summaries, and chapters. Authenticated attackers can supply arbitrary video IDs to read sensitive AI-generated content and trigger unauthorized AI generation that consumes the video owner's credits without consent.

← Alle CVE's bekijken Bekijk op cve.org ↗