CVE-2023-50172: Medium severity wwbn avideo vulnerability
A recovery notification bypass vulnerability exists in the userRecoverPass.php captcha validation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to silently create a recovery pass code for any user.
Other sources
A recovery notification bypass vulnerability exists in the userRecoverPass.php captcha validation functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to the silent creation of a recovery pass code for any user.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-50172?
CVE-2023-50172 is classified as a high severity vulnerability due to its potential to allow unauthorized recovery code generation.
How do I fix CVE-2023-50172?
To remediate CVE-2023-50172, update the WWBN AVideo software to a version that addresses this vulnerability.
Which versions of WWBN AVideo are affected by CVE-2023-50172?
CVE-2023-50172 affects WWBN AVideo versions up to and including 12.4 and commit 15fed957fb.
What are the consequences of exploiting CVE-2023-50172?
Exploitation of CVE-2023-50172 could lead to unauthorized users creating recovery pass codes without notification.
Where can I find more details about CVE-2023-50172?
For detailed information on CVE-2023-50172, refer to the official security advisories and commit logs related to the WWBN AVideo project.