CVE-2021-21286

Name of the Vulnerable Software and Affected Versions: AVideo Platform versions prior to 10.2

Description: The issue allows an ordinary user to bypass authorization and gain admin control. This is resolved by removing the pass hash and the recoverPass hash from all queries.

Recommendations: For versions prior to 10.2, update to version 10.2 to resolve the issue. As a temporary workaround, consider restricting access to admin controls until the update can be applied.