Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2023/12/22 4:55 p.m.37 views

CVE-2023-50258 Blind SSRF in `/home/testdiscord` endpoint

Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated blind server-side request forgery SSRF. The testDiscord request handler in medusa/server/web/home/handler.py does not validate the user-controlled discordwebhook variable and pass...

5.3CVSS5.7AI score0.00693EPSS
SaveExploits1References5
Rows per page
Query Builder