CyberRota Analysis
AI-GeneratedAVideo versions up to 29.0 are susceptible to a blind server-side request forgery vulnerability that allows authenticated users with upload permissions to exploit the getHeaderContentTypeFromURL function. This flaw enables attackers to store malicious URLs, which can then probe internal network hosts during video playback, potentially exposing sensitive information through content-type oracles and timing-based attacks. Organizations using AVideo should prioritize remediation, especially those with user-upload functionalities, to mitigate the risk of internal network exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
AVideo through 29.0 contains a blind server-side request forgery vulnerability in the getHeaderContentTypeFromURL function that issues get_headers() calls guarded only by format validation. Authenticated users with canUpload permission can store attacker-chosen URLs as video links, triggering vulnerable function execution on every video watch page render to probe internal hosts using content-type oracles and timing-based detection.