CVE-2022-36243

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-36243
Shop Beat Solutions (pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in "studio" software of Shop Beat. This issue affects: Shop Beat studio studio versions prior to 3.2.57 on arm.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://www.shopbeat.co.za Product
https://www.shopbeat.co.za Product
Configurations

Configuration 1 (hide)

cpe:2.3:a:shopbeat:shop_beat_media_player:*:*:*:*:*:*:arm:*
History

No history.

Information

Published : 2023-05-30 20:15

Updated : 2025-01-13 21:15

NVD link : CVE-2022-36243

Mitre link : CVE-2022-36243

CVE.ORG link : CVE-2022-36243

JSON object : View

Products Affected

shopbeat

  • shop_beat_media_player
CWE
CWE-548

Exposure of Information Through Directory Listing

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')