CyberRota Analysis
AI-GeneratedThe vulnerability in WWBN AVideo allows attackers to exploit the password recovery process by using expired tokens to reset user passwords without restriction. This critical flaw enables unauthorized access to user accounts, posing a significant risk to user data and account integrity. Organizations using AVideo should prioritize patching this vulnerability to protect against potential account takeovers.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
WWBN AVideo fails to validate password recovery token expiration in userRecoverPassSave.json.php, allowing attackers to use expired tokens to reset account passwords indefinitely. Attackers who obtain a recovery token can use it at any time to change the target account's password and gain full account access.