GHSA-vvfw-4m39-fjqf: WWBN AVideo has CSRF in configurationUpdate.json.php Enables Full Site Configuration Takeover Including Encoder URL and SMTP Credentials

April 14, 2026

This advisory has been withdrawn.

References

github.com/WWBN/AVideo
github.com/WWBN/AVideo/commit/f9492f5e6123dff0292d5bb3164fde7665dc36b4
github.com/WWBN/AVideo/security/advisories/GHSA-vvfw-4m39-fjqf
github.com/advisories/GHSA-vvfw-4m39-fjqf

Code Behaviors & Features

Detect and mitigate GHSA-vvfw-4m39-fjqf with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →