EasyCVR User Data Exposure Scanner

EasyCVR is a video management platform designed for organizations to centralize surveillance operations, including live monitoring, playback, and analytics. It is deployed in sectors like government, retail, and critical infrastructure, where security teams rely on its interface to manage camera feeds and user permissions. The platform integrates with various hardware, making it a backbone for modern security systems.

The user data exposure vulnerability arises when API endpoints lack proper authentication checks, allowing unauthenticated requests to access sensitive information. This occurs due to misconfigured access controls or insufficient validation of user sessions, enabling attackers to enumerate user accounts and roles without authorization.

Specifically, the vulnerability is present in the /api/v1/user/list endpoint, which returns a JSON array of user objects containing fields like username, role, email, and password hashes. No session token or API key is required to query this endpoint, making it trivial for attackers to extract all user data.

If exploited, an attacker can obtain a complete list of EasyCVR users, including administrative accounts, and use this information for targeted phishing, credential stuffing, or privilege escalation attacks. This compromises the confidentiality of the surveillance system and can lead to unauthorized access to video feeds and system controls.