mirror of
https://github.com/0xMarcio/cve.git
synced 2025-05-06 02:31:38 +00:00
947 B
947 B
CVE-2023-30854
Description
AVideo is an open source video platform. Prior to version 12.4, an OS Command Injection vulnerability in an authenticated endpoint /plugin/CloneSite/cloneClient.json.php
allows attackers to achieve Remote Code Execution. This issue is fixed in version 12.4.
POC
Reference
No PoCs from references.