PT-2025-51872 · Avideo · Avideo

Valentin Lobstein · Published 2025-12-17 · Updated 2025-12-21 · CVE-2025-34439

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 20.1

Description AVideo versions prior to 20.1 are susceptible to an open redirect issue because of inadequate validation of the cancelUri parameter during user login. This allows an attacker to construct a link that redirects users to arbitrary external websites, potentially enabling phishing attacks.

Recommendations Update AVideo to version 20.1 or later.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-34439

Affected Products

Avideo

References · 8

• 🔥 https://chocapikk.com/posts/2025/avideo-security-vulnerabilities · Exploit
• https://github.com/WWBN/AVideo/commit/4a53ab2056 · Patch
• https://github.com/WWBN/AVideo/commit/88bc40427b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-34439 · Security Note
• https://osv.dev/vulnerability/CVE-2025-34439 · Vendor Advisory
• https://vulncheck.com/advisories/avideo-open-redirect-via-canceluri-parameter · Note
• https://twitter.com/CVEnew/status/2002835973701357708 · Twitter Post
• https://t.me/CVEtracker/40076 · Telegram Post