References https://nvd.nist.gov/vuln/detail/CVE-2025-34439 https://access.redhat.com/security/cve/cve-2025-34439 https://github.com/advisories/GHSA-3pgj-h3jv-hj48 https://chocapikk.com/posts/2025/avideo-security-vulnerabilities/ https://avd.aliyun.com/product?prod=avideo https://cvefeed.io/vuln/detail/CVE-2025-34439 https://www.vulncheck.com/advisories/avideo-open-redirect-via-siteredirecturi-parameter https://devhub.checkmarx.com/cve-details/cve-2025-34439/ https://radar.offseq.com/threat/cve-2025-34439-cwe-601-url-redirection-to-untruste-d54b1aaf https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2025-34439
Related VulnerabilitiesAVideo /plugin/API/get.json.php 文件包含漏洞(CVE-2026-33513)WWBN AVideo /objects/plugins.json.php 信息泄露漏洞 (CVE-2026-43885)PoCCVE-2026-33478: AVideo <= 26.0 - WWBN AVideo - Remote Code ExecutionAVideo /plugin/Live/test.php 服务器端请求伪造漏洞(CVE-2026-33502)(CVE-2025-34433) AVideo 安装盐预测远程代码执行漏洞Wwbn Avideo任意重定向漏洞(CVE-2025-34440)Wwbn Avideo敏感系统信息暴露给未经授权的控制领域漏洞(CVE-2025-34442)Wwbn Avideo权限绕过漏洞(CVE-2025-34438)Wwbn Avideo向未经授权的行为者暴露私人个人信息漏洞(CVE-2025-34441)Wwbn Avideo权限绕过漏洞(CVE-2025-34437)Wwbn Avideo权限绕过漏洞(CVE-2025-34436)Wwbn Avideo权限绕过漏洞(CVE-2025-34435)Wwbn Avideo缺少关键功能的身份验证漏洞(CVE-2025-34434)