4.8
/ 10
MEDIUM
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Description
AVideo versions prior to 20.0 contain an open redirect vulnerability caused by insufficient validation of the siteRedirectUri parameter during user registration. Attackers can redirect users to external sites, facilitating phishing attacks.
Basic Information
ID
CVE-2025-34440
Source
VulnCheck
Published
Dec 17, 2025 at 19:48
Affected Product
Vendor
World Wide Broadcast Network
Product
AVideo
Affected Versions
World Wide Broadcast Network AVideo 0