{"id":"CVE-2020-23490","aliases":["EUVD-2020-16234","GHSA-5529-jvgg-87h8"],"status":"published","title":"There was a local file disclosure vulnerability in AVideo \u003c 8.9 via the proxy streaming. An...","description":"There was a local file disclosure vulnerability in AVideo \u003c 8.9 via the proxy streaming. An unauthenticated attacker can exploit this issue to read an arbitrary file on the server. Which could leak database credentials or other sensitive information such as /etc/passwd file.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.02645,"percentile":0.85798,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2020-11-16T17:03:52Z","modified":"2026-10-20T10:52:49Z","products":[{"vendor":"wwbn","product":"avideo"}],"references":[{"url":"https://github.com/WWBN/AVideo/commit/218c98cbd4a4a2c15745852bcd0f29faf101bd8c","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://cube01.io/blog/Avideo-Remote-Code-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-23490"},{"url":"https://github.com/advisories/GHSA-5529-jvgg-87h8"}],"sources":{"cve":[{"id":"CVE-2020-23490","description":"There was a local file disclosure vulnerability in AVideo \u003c 8.9 via the proxy streaming. An unauthenticated attacker can exploit this issue to read an arbitrary file on the server. Which could leak database credentials or other sensitive information such as /etc/passwd file.","status":"published","published":"2020-11-16T17:03:52Z","modified":"2024-08-04T14:58:15.095Z","updated_at":"2026-11-02T14:35:49.209579Z"}],"euvd":[{"id":"EUVD-2020-16234","description":"There was a local file disclosure vulnerability in AVideo \u003c 8.9 via the proxy streaming. An unauthenticated attacker can exploit this issue to read an arbitrary file on the server. Which could leak database credentials or other sensitive information such as /etc/passwd file.","status":"published","published":"2020-11-16T17:03:52Z","modified":"2024-08-04T14:58:15Z","updated_at":"2026-11-03T03:07:21.661388Z"}],"ghsa":[{"id":"GHSA-5529-jvgg-87h8","title":"There was a local file disclosure vulnerability in AVideo \u003c 8.9 via the proxy streaming. An...","description":"There was a local file disclosure vulnerability in AVideo \u003c 8.9 via the proxy streaming. An unauthenticated attacker can exploit this issue to read an arbitrary file on the server. Which could leak database credentials or other sensitive information such as /etc/passwd file.","status":"published","published":"2022-05-24T17:34:15Z","modified":"2023-01-29T05:04:46Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:45:37.901426Z"}],"nvd":[{"id":"CVE-2020-23490","description":"There was a local file disclosure vulnerability in AVideo \u003c 8.9 via the proxy streaming. An unauthenticated attacker can exploit this issue to read an arbitrary file on the server. Which could leak database credentials or other sensitive information such as /etc/passwd file.","status":"published","published":"2020-11-16T18:15:12.36Z","modified":"2026-06-17T03:04:46.073Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:06:24.137599Z"}],"osv":[{"id":"CVE-2020-23490","description":"There was a local file disclosure vulnerability in AVideo \u003c 8.9 via the proxy streaming. An unauthenticated attacker can exploit this issue to read an arbitrary file on the server. Which could leak database credentials or other sensitive information such as /etc/passwd file.","status":"published","published":"2020-11-16T18:15:12.36Z","modified":"2026-10-20T10:52:49.666594356Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:15.534837Z"}]}}