cvedb.io
CVE-2025-49183
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2025-06-12T14:15:30.580 · Last modified 2026-06-17T09:30:53.477

Summary

All communication with the REST API is unencrypted (HTTP), allowing an attacker to intercept traffic between an actor and the webserver. This leads to the possibility of information gathering and downloading media files.

Affected products

sick — media_server

Does this affect you?

Add your gear to cvedb and we'll alert you only when sick ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.