High severity7.5NVD Advisory· Published Mar 11, 2022· Updated Jun 17, 2026

CVE-2022-25216

Description

An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12 Player (recently renamed PlayerFab) has read-access, by means of an HTTP GET request to http://<IP_ADDRESS>:32080/download/<URL_ENCODED_PATH>.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

DVDFab/12 Player
cpe:2.3:a:dvdfab:12_player:*:*:*:*:*:*:*:*
Range: >=6.2.10,<=6.2.11
DVDFab/Playerfab
cpe:2.3:a:dvdfab:playerfab:*:*:*:*:*:*:*:*
Range: >=7.0.0.0,<=7.0.0.5
DVDFab/DVDFab Playerdescription
DVDFab/DVDFab 12 Playerllm-fuzzy

Patches

Vulnerability mechanics

References

www.tenable.com/security/research/tra-2022-07nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.011
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000