CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Windows. Its EPSS score suggests a 13.8% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2022-25216
Severity
HIGH
CVSS
7.5
EPSS
13.84%
Windows
Original NVD Description
An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12 Player (recently renamed PlayerFab) has read-access, by means of an HTTP GET request to http://<IP_ADDRESS>:32080/download/<URL_ENCODED_PATH>.