Skip to content
OpenAdvisories

Vendor

getumbrel

1 known vulnerabilities.

Products

umbrel 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-49379 Public exploit

    Remote Code Execution (RCE) via Cross-Site Scripting (XSS) in Umbrel

    Umbrel is a home server OS for self-hosting. The login functionality of Umbrel before version 1.2.2 contains a reflected cross-site scripting (XSS) vulnerability in use-auth.tsx. An attacker can specify a malicious redirect query parameter to trigger the vuln…

    getumbrel umbrel