CVE-2022-25568: Motioneye Project Motioneye

High severity, CVSS 7.5. EPSS: 6.9% chance of exploitation in the next 30 days.

MotionEye v0.42.1 and below allows attackers to access sensitive information via a GET request to /config/list. To exploit this vulnerability, a regular user password must be unconfigured.

Affected products

• Motioneye Project Motioneye: up to and including 0.42.1

Published 2022-03-24. Last modified 2026-06-17.