[wwbn/avideo] Open redirect in wwbn/avideo

Open redirect vulnerability in objects/login.json.php in WWBN AVideo through 11.6, allows attackers to arbitrarily redirect users from a crafted url to the login page. A patch is available on the master branch of the repository.

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-27463
• https://github.com/WWBN/AVideo/commit/77e9aa6411ff4b97571eb82e587139ec05ff894c
• https://avideo.tube/
• https://github.com/advisories/GHSA-34hv-f45p-4qfq