Critical · 9.8 CVE-2024-46054 EUVD-2024-42173GHSA-qq65-5wvg-p275

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to u…

Published Nov 27, 2024 · Updated Dec 2, 2024 · Assigned by mitre

Description

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication, allowing any user to upload files.

References

https://github.com/davidguva/OpenVidReview
https://github.com/davidguva/OpenVidReview/blob/main/routes/upload.js
https://github.com/b1d0ws/CVEs/blob/main/CVE-2024-46054.md