CVE-2024-46054 Information

Description

OpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible without authentication allowing any user to upload files.

Reference

https://github.com/b1d0ws/CVEs/blob/main/CVE-2024-46054.md https://github.com/davidguva/OpenVidReview https://github.com/davidguva/OpenVidReview/blob/main/routes/upload.js

Share on: