MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| motioneye(PyPI) | 0 | 0.43.1b1 | N/A |
CVSS Metrics
