CVE-2023-50258

Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated blind server-side request forgery SSRF. The "testDiscord" request handler in "medusa/server/web/home/handler.py" does not validate the user-controlled "discordwebhook" variable an...

CVE-2023-50258: Server-Side Request Forgery (SSRF)

Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated blind server-side request forgery SSRF. The testDiscord request handler in medusa/server/web/home/handler.py does not validate the user-controlled discordwebhook variable and pass...