Unrated severityNVD Advisory· Published Feb 11, 2026· Updated Feb 12, 2026
AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)
CVE-2020-37172
Description
AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can craft malicious requests to the recoverPass endpoint using the user's recovery token to change account credentials without authentication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- AVideo/AVideo Platformv5Range: 8.1
Patches
Vulnerability mechanics
References
3- www.exploit-db.com/exploits/48003mitreexploit
- www.vulncheck.com/advisories/avideo-platform-cross-site-request-forgery-password-resetmitrethird-party-advisory
- avideo.commitreproduct
News mentions
0No linked articles in our index yet.