CVE-2022-36247 - CVE House
Back to Database
Status published Unknown CVE-2022-36247

Shop Beat Services Vulnerable To IDOR

Vulnerability Description

Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to IDOR via controlpanel.shopbeat.co.za.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-36247

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Shop Beat thanks Emirates National Oil Company Limited (ENOC) LLC for the above discovery.

References

More from Shop Beat

View All →
CVE-2022-36250
Cross Site Request Forgery on Shop Beat Services
Unknown 0
CVE-2022-36249
Shop Beat Services Vulnerable To Bypass 2FA via APIs
Unknown 0
CVE-2022-36246
Shop Beat Services Vulnerable To Insecure Permissions
Unknown 0
CVE-2022-36244
Multiple Stored Cross-Site Scripting Vulnerabilities on Shop Beat Services
Unknown 0
CVE-2022-36243
Directory Traversal on Shop Beat Services
Unknown 0

Affected Vendor

Affected Software

studio
Vulnerable Versions:
studio

Timeline

Official Publish: May 30th, 2023
Last Modified: January 13th, 2025
Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.