CVE 4.8 MEDIUM

AVideo < 20.0 Open Redirect via siteRedirectUri Parameter_CVE-2025-34440

4.8 / 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Description

AVideo versions prior to 20.0 contain an open redirect vulnerability caused by insufficient validation of the siteRedirectUri parameter during user registration. Attackers can redirect users to external sites, facilitating phishing attacks.

Basic Information

ID CVE-2025-34440
Source VulnCheck
Published Dec 17, 2025 at 19:48

Affected Product

Vendor World Wide Broadcast Network
Product AVideo
Affected Versions World Wide Broadcast Network AVideo 0

CWE Classification

References

💭 Join the Security Discussion

🔒 Your email address will not be published. Required fields are marked *

⚠️ Please be respectful and constructive in your comments. Security discussions should remain professional.