Beveiligingsadvies

CVE-2026-90540

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-12 12:08:47

Laatst bijgewerkt 2026-09-14 16:03:30

Toegewezen door VulnCheck

CVSS-score 5.3

Status PUBLISHED

Beschrijving

WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to validate watch permissions in the playListAddVideo.json.php endpoint when adding videos to playlists. Authenticated attackers can add password-protected videos they cannot watch to playlists they own by submitting the video ID and playlist ID parameters.

← Alle CVE's bekijken Bekijk op cve.org ↗