https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 18:48:41 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-88872 <p>AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the setPassword.json.php endpoint that allows unauthenticated attackers to modify any user&#39;s channel password by sending a GET request. Attackers can craft a malicious webpage that, when visited by an authenticated administrator, sets or clears any user&#39;s channel password without CSRF token validation.</p> <p>AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the setPassword.json.php endpoint that allows unauthenticated attackers to modify any user&#39;s channel password by sending a GET request. Attackers can craft a malicious webpage that, when visited by an authenticated administrator, sets or clears any user&#39;s channel password without CSRF token validation.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-88872 https://vulnerability.circl.lu/vuln/ghsa-576q-p8cg-8mr4 <p>AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the setPassword.json.php endpoint that allows unauthenticated attackers to modify any user&#39;s channel password by sending a GET request. Attackers can craft a malicious webpage that, when visited by an authenticated administrator, sets or clears any user&#39;s channel password without CSRF token validation.</p> <p>AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-site request forgery vulnerability in the setPassword.json.php endpoint that allows unauthenticated attackers to modify any user&#39;s channel password by sending a GET request. Attackers can craft a malicious webpage that, when visited by an authenticated administrator, sets or clears any user&#39;s channel password without CSRF token validation.</p> https://vulnerability.circl.lu/vuln/ghsa-576q-p8cg-8mr4