Leepeuker Movary vulnerabilities
- leepeuker movaryMovary User Management (/settings/users) has Authorization Bypass that Allows Low-Privileged Users to Enumerate All Users and Create Administrator Accounts8.8 High
- leepeuker movaryAuthenticated Movary User Can Self-Escalate to Administrator via PUT /settings/users/{userId} by Setting isAdmin=true8.8 High
- leepeuker movaryMovary has Authenticated SSRF via Jellyfin Server URL Verification that Allows Internal Network Probing7.7 High
- leepeuker movaryMovary vulnerable to Cross-site Scripting with `?categoryCreated=` param9.3 Critical
- leepeuker movaryMovary vulnerable to Cross-site Scripting with `?categoryDeleted=` param9.3 Critical
- leepeuker movaryMovary vulnerable to Cross-site Scripting with `?categoryUpdated=` param9.3 Critical
- leepeuker movaryMovary unvalidated Referer header allows open redirect and phishing5.1 Medium
- leepeuker movaryMovary vulnerable to an open redirect5.1 Medium