{"action":"Upgrade motioneye to 0.43.1b1 or later.","affected":[{"fixed":"0.43.1b1","introduced":"0"}],"component":"motioneye","cve_ids":["CVE-2022-25568"],"ecosystem":"PyPI","epss":0.06885,"exploited":false,"fixed_versions":["0.43.1b1"],"ghsa_id":"GHSA-2c7w-v459-cwgf","id":"tcs_01M5KESB67W4N65R8C7TGW4F88","modified_at":"2024-11-22T21:12:07.099643Z","published_at":"2022-03-25T00:00:33Z","references":["https://osv.dev/vulnerability/GHSA-2c7w-v459-cwgf","https://nvd.nist.gov/vuln/detail/CVE-2022-25568","https://github.com/ccrisan/motioneye/issues/2292","https://github.com/motioneye-project/motioneye/commit/c60b64af5bb8c09189071522a1f6796cb44340b0","https://github.com/motioneye-project/motioneye","https://github.com/pypa/advisory-database/tree/main/vulns/motioneye/PYSEC-2022-43141.yaml","https://www.pizzapower.me/2022/02/17/motioneye-config-info-disclosure"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-2c7w-v459-cwgf","url":"https://osv.dev/vulnerability/GHSA-2c7w-v459-cwgf"}],"summary":"MotionEye allows attackers to access sensitive information"}