CVE-2025-34441

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-34441

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-34441.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-34441

Published

2025-12-17T19:48:09Z

Modified

2026-08-12T03:51:10Z

Severity

6.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N CVSS Calculator

Summary

AVideo < 20.1 User Information Disclosure via Public API

Details

AVideo versions prior to 20.1 expose sensitive user information through an unauthenticated public API endpoint. Responses include emails, usernames, administrative status, and last login times, enabling user enumeration and privacy violations.

Database specific

{
    "cna_assigner": "VulnCheck",
    "cwe_ids": [
        "CWE-359"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/34xxx/CVE-2025-34441.json",
    "unresolved_ranges": [
        {
            "extracted_events": [
                {
                    "fixed": "20.1"
                }
            ],
            "source": "AFFECTED_FIELD"
        },
        {
            "extracted_events": [
                {
                    "fixed": "20.1"
                }
            ],
            "source": "CPE_FIELD"
        }
    ]
}

References

Affected packages

Git / github.com/wwbn/avideo

Affected ranges

Type

GIT

Repo

https://github.com/wwbn/avideo

Events

Introduced

Fixed

1416c517e2

Fixed

4a53ab2056

Database specific

Show details

{
    "source": "REFERENCES"
}

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-34441.json"