Threats tagged 'ghsa-9p3g-wqwx-gmg5'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.9	EPSS 0.4%	CVE-2026-90536WWBN AVideo · Information Exposure Medium6.9EPSS 0.4%2026-09-12CVE Database V5CVE-2026-90536 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 fails to authorize access to the adsInfo API endpoint, allowing unauthenticated attackers to retrieve password-protected video owner identifiers. Attackers can call the adsInfo API with a videos_id parameter to obtain the owner's user ID and personalized ad creative URLs without authentication or permission checks. EPSS 0.4%Vulnerability #ghsa-9p3g-wqwx-gmg5	CVE Database V5	2026-09-12

Page 1 of 1