Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2020-36878

ReQuest Serious Play F3 Media Player <= 3.0.0 Directory Traversal File Disclosure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

ReQuest Serious Play Media Player 3.0 contains an unauthenticated file disclosure vulnerability when input passed through the 'file' parameter in and script is not properly verified before being used to read web log files. Attackers can exploit this to disclose contents of files from local resources.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

ReQuest Serious Play LLC ReQuest Serious Play Media Player

Default version status: unaffected

  • 3.0.0affected
  • 2.1.0.831affected
  • 1.5.2.822affected
  • 1.5.2.821affected
  • 1.5.1.820affected

References