Skip to content
Threat Feed
Subscribe

Product

MotionEye (< 0.44.0)

1 brief RSS
critical advisory

motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal

Unauthenticated attackers can exploit a path traversal vulnerability in motionEye versions prior to 0.44.0 to read the application's configuration file, steal the admin SHA-1 password hash, and achieve full administrative access, leading to remote code execution.

motionEye path-traversal authentication-bypass remote-code-execution credential-theft web-application
1r 5t