Filtered by vendor Avideo Subscriptions
Filtered by product Avideo Platform Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-37172 1 Avideo 1 Avideo Platform 2026-02-11 5.3 Medium
AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can craft malicious requests to the recoverPass endpoint using the user's recovery token to change account credentials without authentication.