Skip to content
OpenAdvisories

Package · Go

github.com/navidrome/navidrome

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2024-47062 Public exploit

    Multiple SQL Injections and ORM Leak in navidrome

    Navidrome is an open source web-based music collection server and streamer. Navidrome automatically adds parameters in the URL to SQL queries. This can be exploited to access information by adding parameters like `password=...` in the URL (ORM Leak). Furtherm…

    navidrome navidrome github.com/navidrome/navidrome Go