Unrated severityNVD Advisory· Published Feb 11, 2026· Updated Feb 12, 2026
AVideo Platform 8.1 - Cross Site Request Forgery (Password Reset)
CVE-2020-37172
Description
AVideo Platform 8.1 contains a cross-site request forgery vulnerability that allows attackers to reset user passwords by exploiting the password recovery mechanism. Attackers can craft malicious requests to the recoverPass endpoint using the user's recovery token to change account credentials without authentication.
Affected products
2- Range: <= 8.1
- AVideo/AVideo Platformv5Range: 8.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.exploit-db.com/exploits/48003mitreexploit
- www.vulncheck.com/advisories/avideo-platform-cross-site-request-forgery-password-resetmitrethird-party-advisory
- avideo.commitreproduct
News mentions
0No linked articles in our index yet.