What’s Vulnerable › Vulnerabilities

CVE-2022-27463

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-04-05 · updated 2026-06-17
• Weakness: CWE-601

Description

Open redirect vulnerability in objects/login.json.php in WWBN AVideo through 11.6, allows attackers to arbitrarily redirect users from a crafted url to the login page.

Affected products

• WWBN AVideo: through 11.6

References

• https://avideo.tube/
• https://github.com/WWBN/AVideo/commit/77e9aa6411ff4b97571eb82e587139ec05ff894c
• https://avideo.tube/
• https://github.com/WWBN/AVideo/commit/77e9aa6411ff4b97571eb82e587139ec05ff894c

Get alerted when CVE-2022-27463 or the next vulnerability affects your stack