CVE-2020-23489

CVE-2020-23489 describes a File Deletion vulnerability in the import.json.php file of Avideo versions prior to 8.9. This flaw allows an authenticated attacker to delete the configuration.php file, bypassing privilege checks and enabling privilege escalation to an administrator. With a CVSS score of 8.8 (High), this vulnerability is easily exploitable over the network with low privileges and no user interaction, leading to high impact on confidentiality, integrity, and availability. Despite its severity, there is no public exploit code available (Metasploit, Nuclei, ExploitDB), it is not listed in CISA's KEV catalog, and there is no evidence of active exploitation or significant community discussion.