CyberRota Analysis
AI-GeneratedAVideo is vulnerable due to an unauthenticated credential submission flaw in the preauthorize.json.php file, which allows attackers to submit credentials via GET requests without rate limiting. This can lead to an increased risk of sustained password guessing attacks and the potential for unauthorized access through excessive two-factor confirmation emails. Organizations using AVideo should prioritize remediation to protect user accounts from exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
WWBN AVideo contains an unauthenticated credential submission vulnerability in plugin/Live/api/preauthorize.json.php that accepts credentials over GET without rate limiting. Attackers can submit correct credentials repeatedly to trigger uncapped two-factor confirmation emails and perform sustained password guessing attacks against user accounts.