CVE-2024-31819: WWBN AVideo Remote Code Execution

April 10, 2024 (updated August 29, 2024)

An issue in WWBN AVideo v.12.4 through v.14.2 allows a remote attacker to execute arbitrary code via the systemRootPath parameter of the submitIndex.php component.

References

chocapikk.com/posts/2024/cve-2024-31819
github.com/Chocapikk/CVE-2024-31819
github.com/WWBN/AVideo
github.com/WWBN/AVideo/commit/fcb1f79278684f02ee59130dc0304bd063d9d6d7
github.com/advisories/GHSA-mv5w-wr5c-575p
nvd.nist.gov/vuln/detail/CVE-2024-31819

Code Behaviors & Features

Detect and mitigate CVE-2024-31819 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →