Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-30842: https://github.com/WWBN/AVideo/security/advisories/GHSA-xr9h-p2rc-rpqm · WWBN/AVideo@236228f

AVideo is an open-source video platform. Prior to version 12.4, AVideo is vulnerable to remote code execution when an attacker embeds a malicious video link. This issue is fixed in version 12.4.

CVE
#xss#vulnerability#git#php#rce#auth

Skip to content

Sign up

    • Actions

      Automate any workflow

    • Packages

      Host and manage packages

    • Security

      Find and fix vulnerabilities

    • Codespaces

      Instant dev environments

    • Copilot

      Write better code with AI

    • Code review

      Manage code changes

    • Issues

      Plan and track work

    • Discussions

      Collaborate outside of code

Explore

*   All features
*   Documentation
*   GitHub Skills
*   Blog
  • For

    • Enterprise
    • Teams
    • Startups
    • Education

    By Solution

    • CI/CD & Automation
    • DevOps
    • DevSecOps

    Case Studies

    • Customer Stories
    • Resources
    • GitHub Sponsors

      Fund open source developers

*   The ReadME Project
    
    GitHub community articles
    

Repositories

*   Topics
*   Trending
*   Collections
  • Pricing

  • In this repository All GitHub

  • No suggested jump to results

  • In this repository All GitHub

  • In this organization All GitHub

  • In this repository All GitHub

Sign in

Sign up

WWBN / AVideo Public

  • Notifications
  • Fork 940
  • Star 1.7k
  • Code
  • Issues 286
  • Pull requests 7
  • Actions
  • Projects 1
  • Wiki
  • Security
  • Insights

More

Permalink

Browse files

https://github.com/WWBN/AVideo/security/advisories/GHSA-xr9h-p2rc-rpqm

  • Loading branch information

DanieL authored and DanieL committed

Feb 2, 2023

1 parent 75f0c6c commit 236228f

Showing 1 changed file with 1 addition and 1 deletion.

2 plugin/Meet/Objects/Meet_schedule.php

Show comments View file

@@ -76,7 +76,7 @@ public function setPassword($password) {

}

public function setTopic($topic) {

$this->topic = $topic;

$this->topic = xss_esc($topic);

}

public function setStarts($starts) {

0 comments on commit 236228f

Please sign in to comment.

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907