Leepeuker vulnerabilities
Products
- Movary 8
Newest
- leepeuker movary Movary User Management (/settings/users) has Authorization Bypass that Allows Low-Privileged Users to Enumerate All Users and Create Administrator Accounts 8.8 High
- leepeuker movary Authenticated Movary User Can Self-Escalate to Administrator via PUT /settings/users/{userId} by Setting isAdmin=true 8.8 High
- leepeuker movary Movary has Authenticated SSRF via Jellyfin Server URL Verification that Allows Internal Network Probing 7.7 High
- leepeuker movary Movary vulnerable to Cross-site Scripting with `?categoryCreated=` param 9.3 Critical
- leepeuker movary Movary vulnerable to Cross-site Scripting with `?categoryDeleted=` param 9.3 Critical
- leepeuker movary Movary vulnerable to Cross-site Scripting with `?categoryUpdated=` param 9.3 Critical
- leepeuker movary Movary unvalidated Referer header allows open redirect and phishing 5.1 Medium
- leepeuker movary Movary vulnerable to an open redirect 5.1 Medium