CVE-2020-36876CWE-532

ReQuest Serious Play F3 Media Server <= 7.0.3 Debug Log Disclosure2020

High · published December 5, 2025

CVSS v4.0
8.7
EPSS
0%
Percentile
30.1
In the wild
Unconfirmed
What it is

ReQuest Serious Play F3 Media Server versions 7.0.3.4968 (Pro), 7.0.2.4954, 6.5.2.4954, 6.4.2.4681, 6.3.2.4203, and 2.0.1.823 allows unauthenticated attackers to disclose the webserver's Python debug log file containing system information, credentials, paths, processes and command arguments running on the device. Attackers can access sensitive information by visiting the message_log page.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00374 · 30.1th percentile
Weakness
CWE-532 · Insertion of Sensitive Information into Log File
Published
2025-12-05T17:13Z
EPSS history
Timeline
  • 05 DEC 17:13Z
    ReQuest Serious Play F3 Media Server <= 7.0.3 Debug Log Disclosure2020
    cvelistv5