PT-2025-51873 · Avideo · Avideo

Valentin Lobstein · Published 2025-12-17 · Updated 2025-12-21 · CVE-2025-34440

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions AVideo versions prior to 20.1

Description AVideo versions prior to 20.1 are susceptible to an open redirect issue stemming from inadequate validation of the siteRedirectUri parameter during user registration. This allows attackers to redirect users to external websites, potentially enabling phishing attacks.

Recommendations Update AVideo to version 20.1 or later.

Exploit

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-34440

Affected Products

Avideo

References · 8

• 🔥 https://chocapikk.com/posts/2025/avideo-security-vulnerabilities · Exploit
• https://github.com/WWBN/AVideo/commit/77c70019b0 · Patch
• https://github.com/WWBN/AVideo/commit/4a53ab2056 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-34440 · Security Note
• https://osv.dev/vulnerability/CVE-2025-34440 · Vendor Advisory
• https://t.me/CVEtracker/40075 · Telegram Post
• https://vulncheck.com/advisories/avideo-open-redirect-via-siteredirecturi-parameter · Note
• https://twitter.com/CVEnew/status/2002835974821134378 · Twitter Post