CVE-2023-50264 Bazarr Arbitrary file read in /system/backup/download/ endpoint

Bazarr manages and downloads subtitles. Prior to 1.3.1, Bazarr contains an arbitrary file read in /system/backup/download/ endpoint in bazarr/app/ui.py does not validate the user-controlled filename variable and uses it in the sendfile function, which leads to an arbitrary file read on the system...

PT-2023-31517

Name of the Vulnerable Software and Affected Versions Bazarr versions prior to 1.3.1 Description Bazarr manages and downloads subtitles. The issue arises from the /system/backup/download/ endpoint in bazarr/app/ui.py, where the filename variable, controlled by the user, is not validated and is us...