CVE-2023-47862: Critical severity WWBN AVideo vulnerability

Published Jan 10, 2024

Updated

A local file inclusion vulnerability exists in the getLanguageFromBrowser functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary code execution. An attacker can send a series of HTTP requests to trigger this vulnerability.

Affected Software

1 affected component

WWBN AVideo=15fed957fb

Event History

Jan 10, 2024

CVE Published

via MITRE·03:48 PM

Data Sourced

via MITRE·03:48 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2023-47862?

CVE-2023-47862 has a critical severity due to the potential for arbitrary code execution.

How do I fix CVE-2023-47862?

To fix CVE-2023-47862, update WWBN AVideo to the latest version that addresses this vulnerability.

What are the potential impacts of CVE-2023-47862?

The potential impact of CVE-2023-47862 includes the ability for attackers to execute arbitrary code on the affected system.

Is CVE-2023-47862 a remote or local vulnerability?

CVE-2023-47862 is a local file inclusion vulnerability that can be exploited via specially crafted HTTP requests.

Who is affected by CVE-2023-47862?

Users of WWBN AVideo version 15fed957fb are affected by CVE-2023-47862.