Skip to content
OpenAdvisories

Vendor

pymedusa

3 known vulnerabilities.

Products

Medusa 3
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2023-50259

    Blind SSRF in /home/testslack endpoint

    Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated blind server-side request forgery (SSRF). The `testslack` request handler in `medusa/server/web/home/handler.py` does not validate the user-c…

    pymedusa Medusa
  • Medium 5.3
    CVE-2023-50258

    Blind SSRF in `/home/testdiscord` endpoint

    Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated blind server-side request forgery (SSRF). The `testDiscord` request handler in `medusa/server/web/home/handler.py` does not validate the user…

    pymedusa Medusa