Medium severity5.3NVD Advisory· Published Feb 11, 2026· Updated Jun 17, 2026

CVE-2020-37172

Description

AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can craft malicious requests to the recoverPass endpoint using the user's recovery token to change account credentials without authentication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

AVideo/AVideo Platformv5
Range: 8.1
WWBN/Avideo
cpe:2.3:a:wwbn:avideo:8.1:*:*:*:*:*:*:*
AVideo/AVideo Platformllm-create
Range: = 8.1
AVideo/AVideollm-fuzzy
Range: = 8.1

Patches

Vulnerability mechanics

References

www.exploit-db.com/exploits/48003nvdExploitThird Party AdvisoryVDB Entry
www.vulncheck.com/advisories/avideo-platform-cross-site-request-forgery-password-resetnvdThird Party Advisory
avideo.comnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000