CVE-2022-27463

Name of the Vulnerable Software and Affected Versions WWBN AVideo versions through 11.6

Description The issue is an open redirect vulnerability in the objects/login.json.php file, which allows attackers to redirect users from a crafted URL to the login page. This can be achieved by exploiting the vulnerability in the login.json.php file.

Recommendations For WWBN AVideo versions through 11.6, update to a version that includes the patch available on the master branch of the repository. As a temporary workaround, consider restricting access to the objects/login.json.php file to minimize the risk of exploitation.