CVE-2022-25568

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-25568
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25568.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-25568
Aliases
Published
2022-03-24T16:40:20Z
Modified
2026-08-12T03:51:28.681531986Z
Summary
[none]
Details

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.

Database specific 
{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/25xxx/CVE-2022-25568.json"
}
References

Affected packages

Git / github.com/motioneye-project/motioneye

Affected ranges

Type
GIT
Repo
https://github.com/motioneye-project/motioneye
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
acdc6644dbb0768a228d45fc2b230b779a9bc661
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "0.42.1"
        }
    ],
    "source": "CPE_RANGE",
    "cpe": "cpe:2.3:a:motioneye_project:motioneye:*:*:*:*:*:*:*:*"
}

Affected versions

0.*
0.1
0.10
0.11
0.12
0.13
0.14
0.15
0.16
0.17
0.18
0.19
0.2
0.20
0.21
0.22
0.23
0.24
0.25
0.25.1
0.25.2
0.26
0.27
0.27.1
0.27.2
0.28
0.28.1
0.28.2
0.28.3
0.29rc1
0.29rc2
0.3
0.30
0.30rc1
0.30rc2
0.31
0.31.1
0.31.2
0.31.3
0.31.4
0.34
0.34.1
0.34rc1
0.35
0.35.1
0.35.2
0.35rc1
0.36
0.36.1
0.37
0.37rc1
0.38
0.39
0.39.1
0.39.3
0.4
0.40
0.40rc1
0.40rc2
0.40rc3
0.40rc4
0.40rc5
0.41
0.41rc1
0.42
0.42.1
0.5
0.6
0.7
0.8
0.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-25568.json"