CVE-2026-81732
2026-08-28
12h16 +00:00
12h16 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
WWBN AVideo through version 30.0 fails to enforce authentication on the report4.json.php and report4.1.json.php endpoints, allowing unauthenticated access to user registration statistics. Attackers can send GET requests to these endpoints to retrieve daily and cumulative user-registration counts without any session or authorization.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Exposure of Sensitive Information to an Unauthorized Actor The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. |
