MEDIUM
Directory Traversal on Shop Beat Services
Published May 30, 2023
5.3
MEDIUMCVSS 3.1
EPSS 0.75%
Description
Shop Beat Solutions (pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Directory Traversal via server.shopbeat.co.za. Information Exposure Through Directory Listing vulnerability in "studio" software of Shop Beat. This issue affects: Shop Beat studio studio versions prior to 3.2.57 on arm.
Affected products
-
- Version studioStatusaffectedConstraints<3.2.57
- Version
- ≥ 2.5.95 · < 3.2.57
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-38961 Advisory
- https://www.shopbeat.co.za Product
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-38961 | Advisory | |
| https://www.shopbeat.co.za | Product |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner ShopBeat
Published May 30, 2023
Updated Jan 13, 2025
Reserved Jul 18, 2022
Link CVE-2022-36243
CISA Vulnrichment
Updated Jan 13, 2025
ENISA EUVD
EUVD-2022-38961 Assigner ShopBeat
Published May 30, 2023
Updated Jan 13, 2025
Exploited since n/a
Link EUVD-2022-38961