High severity7.7NVD Advisory· Published Feb 1, 2021· Updated Jun 17, 2026
CVE-2021-21286
CVE-2021-21286
Description
AVideo Platform is an open-source Audio and Video platform. It is similar to a self-hosted YouTube. In AVideo Platform before version 10.2 there is an authorization bypass vulnerability which enables an ordinary user to get admin control. This is fixed in version 10.2. All queries now remove the pass hash and the recoverPass hash.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Range: <10.2
Patches
Vulnerability mechanics
References
2- avideo.tubenvdVendor Advisory
- github.com/WWBN/AVideo/security/advisories/GHSA-xq8j-fhg5-hr39nvdThird Party Advisory
News mentions
0No linked articles in our index yet.