Skip to content

AVideo: Unauthenticated User Enumeration in objects/users.json.php via isCompany Parameter Allows Bypass of the Admin-Only Listing Restriction

Moderate severity GitHub Reviewed Published Apr 27, 2026 in WWBN/AVideo • Updated May 5, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts