[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2023-25313":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":21,"cwes":22,"cpes":25,"technologies":27,"references":29,"score":34,"epss_score":35,"epss_percentile":36,"is_kev":37,"cisa_kev_date_added":38,"cisa_kev_due_date":38,"cisa_ssvc":39,"attack_mappings":49,"exploits":56},324191,"CVE-2023-25313","EUVD-2023-0761","AVideo contains Command injection when embedding a video link\n\nImpact:\n\nAn attacker could execute remote code on a system running wwbn\u002Favideo\n\nStep to Reproduce:\n\n1. Go to the `My Videos` tab\n\nhttps:\u002F\u002Fdemo.avideo.com\u002Fmvideos\n\n2. Click \"Embed a video link\"\n\nAppend a command to the url as a query string. eg. `?whoami`\n\n\nthen click Save\n\nThis issue has been resolved in commit `236228f15`","2023-02-02T01:32:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":19,"availabilityImpact":17,"privilegesRequired":20,"confidentialityImpact":17},"CHANGED","3.1",9.6,"NETWORK","CRITICAL","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:H\u002FI:H\u002FA:H","HIGH","REQUIRED","LOW","NONE",true,[23,24],"CWE-78","CWE-79",[26],"cpe:2.3:a:wwbn:avideo:*:*:*:*:*:*:*:*",[28],"Wwbn Avideo",[30,31,32,33],"https:\u002F\u002Fgithub.com\u002FWWBN\u002FAVideo\u002Fsecurity\u002Fadvisories\u002FGHSA-pgvh-p3g4-86jw","https:\u002F\u002Fnvd.nist.gov\u002Fvuln\u002Fdetail\u002FCVE-2023-30842","https:\u002F\u002Fgithub.com\u002FWWBN\u002FAVideo\u002Fcommit\u002F236228f15a9a31be5a0e60f05dac043682e49a5e","https:\u002F\u002Fgithub.com\u002FWWBN\u002FAVideo",0.83,0.01315,0.70561,false,null,{"timestamp":40,"automatable":41,"tech_impact":42,"exploitation":43,"cisa_decision":44,"cisa_remediation_timeline":48},"2025-02-03T18:54:00.255409Z","yes","total","poc",{"vector":45,"decision":46,"priority":47},"CISAv1\u002FE:P\u002FA:Y\u002FT:T\u002FM:H\u002F2026-10-25T13:39:31.517150\u002F","attend","medium","3D",[50],{"name":51,"source":52,"tactics":53,"technique_id":55},"Exploit Public-Facing Application","attack_vector",[54],"initial-access","T1190",[57],{"link":30}]