Unauthenticated File Access in AVideo ImageGallery

Executive Summary

This vulnerability in WWBN AVideo allows unauthenticated users to access and list files in password-protected image galleries by exploiting a missing permission check in the ImageGallery/list.json.php endpoint. The system fails to validate user permissions before displaying gallery file details, enabling attackers to retrieve filenames and URLs without authentication.

Useful 0 Not Useful 0

Detection Guidance

Check if the ImageGallery/list.json.php endpoint is accessible without authentication by sending a GET request to the URL. Example: curl -v http://<target>/ImageGallery/list.json.php. If the endpoint returns file listings or URLs without requiring login, the system is likely vulnerable.

Useful 0 Not Useful 0

Impact Analysis

Attackers could access sensitive media files stored in password-protected galleries, potentially exposing private or confidential content. This could lead to data breaches, unauthorized distribution of media, or reputational damage if sensitive information is leaked.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could violate GDPR by exposing personal data without authorization and HIPAA by leaking protected health information if media files contain such data. Organizations may face legal penalties, fines, or mandatory breach notifications due to unauthorized data exposure.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately restrict access to the ImageGallery/list.json.php endpoint by implementing proper authentication and authorization checks. Update to the latest patched version if available. If no patch exists, consider disabling the endpoint or applying network-level restrictions.

Useful 0 Not Useful 0