Description
Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metadata including titles, summaries, and chapters. Authenticated attackers can supply arbitrary video IDs to read sensitive AI-generated content and trigger unauthorized AI generation that consumes the video owner's credits without consent.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Cap Cap
Default version status: unaffected
0 to ≤ 8d48642affected
pkg:github/capsoftware/capReferences
- https://github.com/CapSoftware/Cap/issues/1981 ↗
- https://github.com/CapSoftware/Cap ↗
- https://github.com/CapSoftware/Cap/commit/8d48642b6e7938af238386383ef1c273be4110dd ↗
- https://www.vulncheck.com/advisories/cap-missing-access-control-in-video-ai-metadata-endpoint ↗
- https://github.com/CapSoftware/Cap/pull/1926 ↗