CVE-2025-34436 — AVideo < 20.1 IDOR Arbitrary File Upload
AVideo versions prior to 20.1 allow any authenticated user to upload files into directories belonging to other users due to an insecure direct object reference. The upload funct…
Published: 2025-12-17 · CVSS: 8.7 · CVSS 4.0
AVideo versions prior to 20.1 allow any authenticated user to upload files into directories belonging to other users due to an insecure direct object reference. The upload functionality verifies authentication but does not enforce ownership checks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7