CVE-2023-50259

Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated blind server-side request forgery SSRF. The "testslack" request handler in "medusa/server/web/home/handler.py" does not validate the user-controlled "slackwebhook" variable and...