CVE-2020-36878CWE-73

ReQuest Serious Play F3 Media Player <= 3.0.0 Directory Traversal File Disclosure

High · published December 5, 2025

CVSS v4.0
8.7
EPSS
0%
Percentile
26.9
In the wild
Unconfirmed
What it is

ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verified before being used to read web log files. Attackers can exploit this to disclose contents of files from local resources.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00346 · 26.9th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2025-12-05T17:17Z
EPSS history
Timeline
  • 05 DEC 17:17Z
    ReQuest Serious Play F3 Media Player <= 3.0.0 Directory Traversal File Disclosure
    cvelistv5