CVE record · 1 source
CVE-2026-61575
CVSS 4.7AVideo is a video-sharing Platform.
- Vendor
- WWBN
- Product
- AVideo-Encoder
- CVSS v3.1
- 4.7 AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weakness
- CWE-79
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
AVideo is a video-sharing Platform.
AVideo is a video-sharing Platform. Prior to 8.1.0, `view/queue.php` uses `pathinfo` on the caller-controlled `fileURI` and stores its filename through `setTitle` in `encoder_queue.title` without neutralization. `fileURI` is not…