Threats tagged 'ghsa-r23m-jf94-h653'

WWBN AVideo versions 6.5 through 29.7.1 have an authentication bypass vulnerability that allows unauthenticated attackers to log in as any user by exploiting the Hybridauth social login feature. Attackers can impersonate victims by setting their social login display name to the victim's username and omitting the email, enabling access without a password, including administrator accounts.