WWBN AVideo User Enumeration Vulnerability in objects/mention.json.php

A user enumeration vulnerability has been identified in WWBN AVideo versions 29.0 and earlier. The issue resides in the objects/mention.json.php file, which lacks proper authentication checks. While there is a basic entry guard that validates the request term, the absence of a login verification or admin gate allows unauthenticated users to enumerate users on the platform.

Impact

Exploitation of this vulnerability allows for unauthenticated user enumeration, which could be leveraged to gather information about registered users on the platform.