TROYANOSYVIRUS
Back to CVEs

CVE-2022-36247

CRITICAL
9.1

Description

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to IDOR via controlpanel.shopbeat.co.za.

CVE Details

CVSS v3.1 Score9.1
SeverityCRITICAL
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
Published5/30/2023
Last Modified1/13/2025
Sourcenvd
Honeypot Sightings0

Affected Products

shopbeat:shop_beat_media_player

Weaknesses (CWE)

CWE-639

References

https://www.shopbeat.co.za(support@shopbeat.co.za)
https://www.shopbeat.co.za(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.