Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/09/20 2:51 p.m.40 views

Navidrome has Multiple SQL Injections and ORM Leak

Security Advisory: Multiple Vulnerabilities in Navidrome Summary Navidrome automatically adds parameters in the URL to SQL queries. This can be exploited to access information by adding parameters like password=... in the URL ORM Leak. Furthermore, the names of the parameters are not properly...

9.4CVSS7.7AI score0.04457EPSS
SaveExploits2References4Affected Software1
Rows per page
Query Builder