CVE

CVE-2022-25216

7.5

CVSS

Description

An absolute path traversal vulnerability allows a remote attacker to download any file on the Windows file system for which the user account running DVDFab 12 Player (recently renamed PlayerFab) has read-access, by means of an HTTP GET request to http://<IP_ADDRESS>:32080/download/<URL_ENCODED_PATH>.

Attack Vector

Privileges Req.

User Interaction

dvdfab 12 player / playerfab

Updated Sep 18, 2026View on NVD →

S4E scanner

highProduct Based Web Vulnerabilities~10 seconds

CVE-2022-25216 Scanner

CVE-2022-25216 scanner - Path Traversal vulnerability in DVDFab 12 Player (PlayerFab)

Used 2k times · 5.9k assets checked · url

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →