← Database

CVE-2022-25568

HIGH CVSS: 7.5 Published: 2022-03-24 Modified: 2026-06-17

Description

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.

Affected Platforms

Motioneye Project Motioneye

Weakness Type

CWE-1188

References