Avideo Platform
Approved changes feed: RSS · Atom
cpe:2.3:a:avideo:avideo_platform:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Avideo (b99ca9e1-af4c-57b3-9936-7d0bb04b21a5) |
|---|---|
| Product | Avideo Platform (87d47828-8b06-5924-98f7-2cb9d9cfde84) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-37173 |
vulnerable | 2026-06-08 05:25:50.278724 |
AVideo Platform 8.1 - Information Disclosure (User Enumeration)
HIGH (7.5)
AVideo Platform 8.1 contains an information disclosure vulnerability that allows attackers to enumerate user details through the playlistsFromUser.json.php endpoint. Attackers can retrieve sensitive user information including email, password hash, and administrative status by manipulating the users_id parameter.
Published: 2026-02-11T20:36:58.062Z
Updated: 2026-02-12T19:09:54.400Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37172 |
vulnerable | 2026-06-08 05:25:50.278412 |
AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)
MEDIUM (5.3)
AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can craft malicious requests to the recoverPass endpoint using the user's recovery token to change account credentials without authentication.
Published: 2026-02-11T20:33:33.722Z
Updated: 2026-02-12T18:48:14.759Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37158 |
vulnerable | 2026-06-08 05:25:50.259785 |
AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)
MEDIUM (5.3)
AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can craft malicious requests to the recoverPass endpoint using the user's recovery token to change account credentials without authentication.
Published: 2026-02-11T20:49:49.113Z
Updated: 2026-02-20T15:03:08.480Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.