Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2025-34440

AVideo < 20.1 Open Redirect via siteRedirectUri Parameter

Description

AVideo versions prior to 20.1 contain an open redirect vulnerability caused by insufficient validation of the siteRedirectUri parameter during user registration. Attackers can redirect users to external sites, facilitating phishing attacks.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

World Wide Broadcast Network AVideo

Default version status: unaffected

  • 0 to < 20.1affected

References