CVE-2023-47171

PoC —

CVSS 3.1

6.5 medium

EPSS

1%p63

Published

Jan 10, 2024 (Jan 10, 2024)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability exists in the aVideoEncoder.json.php chunkFile path functionality of WWBN AVideo 11.6 and dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.

Vendors: wwbn
Products: avideo
Weakness: CWE-73
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news1 stories

Critical vulnerability in ManageEngine could lead to file creation, dozens of other vulnerabilities disclosed by Talos to start 2024

Cisco TalosJan 18, 13:56 UTC · Jan 18, 2024Vulnerability CVE-2023-47211 CVE-2023-38618 CVE-2023-38621+52 CVEs