Skip to content
OpenAdvisories

Vendor

morpheus65535

4 known vulnerabilities.

Products

bazarr 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2023-50266

    Bazarr Blind Server-Side Request Forgery (SSRF) in the /test/<protocol>/ endpoint

    Bazarr manages and downloads subtitles. In version 1.2.4, the proxy method in bazarr/bazarr/app/ui.py does not validate the user-controlled protocol and url variables and passes them to requests.get() without any sanitization, which leads to a blind server-si…

    morpheus65535 bazarr