CVE-2023-52207

HIGH

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Playlist Free.This issue affects HTML5 MP3 Player with Playlist Free: from n/a through 3.0.0.

Affects 1 product across 1 vendor.

CVSS 3.18.8

EPSS0.6%

Percentile48th

PatchUnknown

CVSS Vector — Plain English Remotely exploitable over the network, low complexity, low privileges required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.

CWE Weakness Definitions

CWE-502: Deserialization of Untrusted Data

Software deserializes untrusted data without validation, allowing crafted objects to execute arbitrary code.

Related Attack Patterns (CAPEC)

CAPEC-586 Object Injection

via CWE-502

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A Deserialization of Untrusted Data vulnerability exists in SVNLabs Softwares HTML5 MP3 Player with Playlist Free, affecting versions from n/a through 3.0.0. This vulnerability could allow an attacker to execute arbitrary code on the system.

BSID: BS-2024-GLOBAL-175135-H • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →

Frequently Asked Questions

What is CVE-2023-52207?

What is the CVSS score for CVE-2023-52207?

CVE-2023-52207 has CVSS 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.6%.

Is CVE-2023-52207 actively exploited?

No confirmed active exploitation of CVE-2023-52207 as of 2026-05-30.

How do I remediate CVE-2023-52207?

Priority: IMMEDIATE.

What systems are affected by CVE-2023-52207?

CVE-2023-52207 affects Svnlabs Html5 Mp3 Player With Playlist Free.

Vulnerability Details

CVE ID	`CVE-2023-52207`
BSID	`BS-2024-GLOBAL-175135-H` BreachSpider Global ID
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
Published	2024-01-08
Last Modified	2026-04-28
ICS Relevance	15%
Weakness (CWE)	Deserialization of Untrusted Data
Source	NVD

Official Description

Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP3 Player with Playlist Free.This issue affects HTML5 MP3 Player with Playlist Free: from n/a through 3.0.0.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can exploit this vulnerability by crafting a malicious payload that is deserialized by the application. This payload can lead to remote code execution, potentially compromising the system.

Exploitation Likelihood: HIGH

Affected Products

Vendor	Product	Affected Versions
Svnlabs	Html5 Mp3 Player With Playlist Free	`≤ 3.0.0`

Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence

● Threat Intelligence Validated: October 2026 | Threat Age: 1011 Days

CISA known-exploited	Not in KEV catalog
Public Exploit	Not confirmed
PoC Code	Not confirmed

AI Enrichment Record — provenance & audit hash

Model	`/workspace/models/qwen2.5-coder-32b-instruct-bf16`
Confidence	HIGH
Enriched At	2026-05-24
SHA-512 Audit Hash	`8d0c7e67db36eb4792b3a962e31cd9fced91ce096dbbb7d266fdc198ff928c520625103ff1700e5c7873a17fe7b5a56ab584f4d9d52887140df78a6dc38972bd`

Related CVEs affecting Svnlabs

CVE-2023-52205 7.2 Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 So... CVE-2023-52202 7.2 Deserialization of Untrusted Data vulnerability in SVNLabs Softwares HTML5 MP... CVE-2014-9177 5.0 The HTML5 MP3 Player with Playlist Free plugin before 2.7 for WordPress allow...

View all Svnlabs CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →