AVideo Open Redirect Vulnerability in User Registration

A open redirect vulnerability has been identified in AVideo versions prior to 20.0. This vulnerability arises from inadequate validation of the siteRedirectUri parameter during user registration, allowing attackers to redirect users to external sites and potentially facilitate phishing attacks.

Impact

Exploitation of this vulnerability allows for open redirection, where users can be sent to untrusted sites, increasing the risk of phishing attacks.

Reproduction

To reproduce this vulnerability, register a new user account and include a malicious URL in the siteRedirectUri parameter. The application will redirect the user to the specified URL, bypassing security measures.

Remediation

Users can upgrade to AVideo version 20.0 or later, where this vulnerability has been addressed.