CVE-2020-23490

CVE-2020-23490 describes a local file disclosure vulnerability in AVideo versions prior to 8.9, specifically affecting the proxy streaming functionality. An unauthenticated attacker can exploit this flaw to read arbitrary files on the server, potentially exposing sensitive data like database credentials or system files such as /etc/passwd. This vulnerability is rated as High severity (CVSS 7.5), indicating a low attack complexity with no user interaction required, and a significant impact on confidentiality. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the potential for unauthorized data access remains a concern.