PT-2025-49272 · Unknown · Request Serious Play Media Player

Published 2025-12-05 · Updated 2025-12-05 · CVE-2020-36878

Positive Technologies (AI Summary)

CVSS v4.0

8.7

High

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions ReQuest Serious Play Media Player version 3.0

Description The software contains an unauthenticated file disclosure issue. Input provided through the file parameter is not sufficiently verified before being used to read web log files. This could allow attackers to disclose the contents of local files. The vulnerable parameter is file.

Recommendations Ensure proper verification of input passed through the file parameter.

Exploit

Fix

Weakness Enumeration

CWE-73

Related Identifiers

CVE-2020-36878

Affected Products

Request Serious Play Media Player

References · 5

• 🔥 https://exploit-db.com/exploits/48949 · Exploit
• https://zeroscience.mk/en/vulnerabilities/ZSL-2020-5599.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-36878 · Security Note
• https://twitter.com/CVEnew/status/1997000975312199951 · Twitter Post
• https://vulncheck.com/advisories/request-serious-play-f-media-player-directory-traversal-file-disclosure · Note