CVE-2022-36243 in Media Player

Résumé

par MITRE • 30/05/2023

Shop Beat Solutions (pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in "studio" software of Shop Beat. This issue affects: Shop Beat studio studio versions prior to 3.2.57 on arm.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Réserver: 18/07/2022
• Divulgation: 30/05/2023
• Modérer: accepté
• Entrée: VDB-230297
• CPE: prêt
• CWE: CWE-548 (confirmé)
• CVSS: 5.3 (NVD)
• EPSS: 0.00747
• KEV: non
• Activités: très faible
• Secteur: Government, Transportation, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-36243
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-36243
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-36243/