CVE-2022-29468: CSRF
A cross-site request forgery (CSRF) vulnerability exists in WWBN AVideo 11.6 and dev master commit 3f7c0364. A specially-crafted HTTP request can lead to increased privileges. An attacker can get an authenticated user to send a crafted HTTP request to trigger this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-29468?
CVE-2022-29468 has a moderate severity due to its potential to allow privilege escalation through CSRF.
How do I fix CVE-2022-29468?
To fix CVE-2022-29468, ensure that you apply the necessary updates or patches provided by WWBN for AVideo versions 11.6.
What kind of vulnerability is CVE-2022-29468?
CVE-2022-29468 is a cross-site request forgery (CSRF) vulnerability that can be exploited to escalate privileges.
Who is affected by CVE-2022-29468?
CVE-2022-29468 affects users of WWBN AVideo version 11.6 and development versions based on commit 3f7c0364.
Can CVE-2022-29468 be exploited remotely?
Yes, CVE-2022-29468 can be exploited remotely if an attacker successfully tricks an authenticated user into sending a malicious HTTP request.