VULNERABILITY INTELLIGENCE

CVE-2025-34442

CVSS score6.9 MEDIUM
EPSS probability0.85%
CISA KEVNot currently listed
Published2025-12-17
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Description

AVideo versions prior to 20.1 disclose absolute filesystem paths via multiple public API endpoints. Returned metadata includes full server paths to media files, revealing underlying filesystem structure and facilitating more effective attack chains.

Weakness classification

  • CWE-497: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Primary references