CVE-2024-53275

Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, the default setup of home-gallery is vulnerable to DNS rebinding. Home-gallery is set up without TLS and user authentication by default, leaving it vulnerable to DNS rebinding. I...

CVE-2024-53275

Home-Gallery.org is a self-hosted open-source web gallery to browse personal photos and videos. In 1.15.0 and earlier, the default setup of home-gallery is vulnerable to DNS rebinding. Home-gallery is set up without TLS and user authentication by default, leaving it vulnerable to DNS rebinding. I...

CVE-2024-53275

creationtimestamp| type| source ---|---|--- 2024-12-23 17:18:28+00:00| seen| https://infosec.exchange/users/cve/statuses/113703276255475730 2024-12-23 20:00:25+00:00| seen| https://t.me/cvedetector/13544 2025-02-18 23:42:23+00:00| seen| Telegram/TXjQzQgzOHIECJMWa7ZlmHCxKny7DMPnS1Yi-SHilBFS741...

CVE-2024-53275

Home-Gallery.org (versions 1.15.0 and earlier) is vulnerable to DNS rebinding due to default exposure without TLS or authentication. An attacker can lure a user to a malicious site, then switch DNS to point to the internal Home-Gallery host and read the web server’s responses, potentially exfiltr...