CVE-2023-49810: High severity wwbn avideo vulnerability
A login attempt restriction bypass vulnerability exists in the checkLoginAttempts functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to captcha bypass, which can be abused by an attacker to bruteforce users credentials. An attacker can send a series of HTTP requests to trigger this vulnerability.
Other sources
A login attempt restriction bypass vulnerability exists in the checkLoginAttempts functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to captcha bypass, which can be abused by an attacker to brute force user credentials. An attacker can send a series of HTTP requests to trigger this vulnerability.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-49810?
The severity of CVE-2023-49810 is classified as high due to the potential for credential brute force attacks.
How do I fix CVE-2023-49810?
To fix CVE-2023-49810, upgrade to WWBN AVideo version 12.5 or later, which addresses the login attempt restriction bypass vulnerability.
What is affected by CVE-2023-49810?
CVE-2023-49810 affects WWBN AVideo versions up to and including 12.4 and the specific commit 15fed957fb.
What type of attack does CVE-2023-49810 allow?
CVE-2023-49810 allows attackers to bypass login attempt restrictions and potentially brute force user credentials.
How does CVE-2023-49810 exploit the system?
CVE-2023-49810 exploits the system by allowing specially crafted HTTP requests to bypass CAPTCHA protections during login attempts.