CVE-2022-25216

An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12…

published March 11, 2022

CVSS

—

EPSS

13%

Percentile

96.4

In the wild

Unconfirmed

What it is

An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12 Player (recently renamed PlayerFab) has read-access, by means of an HTTP GET request to http://<IP_ADDRESS>:32080/download/<URL_ENCODED_PATH>.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.13475 · 96.4th percentile
Published: 2022-03-11T17:54Z

EPSS history

Timeline

11 MAR 17:54Z
An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12…
cvelistv5