Skip to content
OpenAdvisories

Vendor

navidrome

9 known vulnerabilities.

Products

navidrome 9
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.4
    CVE-2024-47062 Public exploit Scanner template

    Multiple SQL Injections and ORM Leak in navidrome

    Navidrome is an open source web-based music collection server and streamer. Navidrome automatically adds parameters in the URL to SQL queries. This can be exploited to access information by adding parameters like `password=...` in the URL (ORM Leak). Furtherm…

    navidrome navidrome github.com/navidrome/navidrome Go