Advisories · Technology
FV Flowplayer Video Player.
Every CVE that names FV Flowplayer Video Player among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
-
FV Player < 7.5.56.7212 - Contributor+ SSRF via Media Library Import
- FV Flowplayer Video Player
-
FV Player < 7.5.56.7212 - Contributor+ Stored XSS via Text Lightbox Caption
- FV Flowplayer Video Player
-
FV Player < 7.5.56.7212 - Subscriber+ Cloud Storage File Disclosure via Media Browser Handlers
- FV Flowplayer Video Player
- CVSS 3.8 Low
FV Flowplayer Video Player 7.4.44.727 - 7.5.55.7212 - Contributor+ Bulk Video Record Disclosure and Modification via Migration Wizard
- FV Flowplayer Video Player
- Broken access control
- CVSS 3.8 Low
FV Flowplayer Video Player < 7.5.56.7212 - Contributor+ Arbitrary Video and Meta Record Deletion, Video Modification and Meta Disclosure via IDOR
- FV Flowplayer Video Player
- Broken access control
- CVSS 4.1 Medium
FV Player 7.5.44.7212 - 7.5.54.7212 - Contributor+ SSRF via retrieve_video_data
- FV Flowplayer Video Player
- Server-side request forgery (SSRF)
- CVSS 6.1 Medium
FV Flowplayer Video Player <= 7.5.0.727 - 7.5.2.727 Reflected Cross-Site Scripting
- FV Flowplayer Video Player
- Cross-site scripting (XSS)