CVE-2023-49862

Summary

CVE-2023-49862 is an information disclosure vulnerability affecting the image upload functionality of WWBN AVideo in the aVideoEncoderReceiveImage.json.php file. This vulnerability, identified in commit 15fed957fb, can be triggered by a crafted HTTP request with a malicious `downloadURL_gifimage` parameter. Successful exploitation allows an attacker to read arbitrary files on the affected system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.