.. / CVE-2022-25568

• Info Disclosure
• Nuclei
• Web

Exploit for MotionEye Config Info Disclosure (CVE-2022-25568)

Description:

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.

Nuclei Template

View the template here CVE-2022-25568.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2022/CVE-2022-25568.yaml

References: