Information Exposure in AVideo via RSS Feed

Executive Summary

This vulnerability in AVideo allows unauthenticated attackers to retrieve channel owner email addresses by supplying a public channel name parameter. The email addresses are exposed in the itunes:email and itunes:author RSS elements of the feed/index.php file. Attackers can enumerate all creator emails by iterating through public channel names.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, check if the feed/index.php endpoint exposes email addresses in RSS feeds. Use curl to query public channel names and inspect responses for itunes:email or itunes:author tags containing email addresses. Example command: curl -s 'http://<target>/feed/index.php?channel=<public_channel_name>' | grep -E 'itunes:(email|author)'

Automated scanning can iterate through known channel names to detect exposed emails. Monitor network traffic for repeated requests to feed/index.php with varying channel parameters.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability enables account takeover attempts and phishing campaigns. Attackers can collect email addresses used for password recovery, leading to potential unauthorized access to accounts. It also facilitates spam and targeted phishing attacks against channel owners.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability exposes personal data (email addresses) without authorization, which violates GDPR principles of data minimization and lawful processing. Under GDPR, unauthorized disclosure of personal data can lead to significant fines and regulatory penalties. For HIPAA, if email addresses are linked to protected health information, this could constitute a breach requiring notification and corrective action.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update AVideo to the latest patched version to remove email exposure from feed/index.php. If updating is not possible, modify feed/index.php to remove itunes:email and itunes:author tags or replace them with a generic contact email.

Apply input validation to restrict unauthorized access to user data. Review and sanitize all RSS feed outputs to prevent similar information exposure issues in other endpoints.

Useful 0 Not Useful 0