Description
Movary is a web application to track, rate and explore your movie watch history. Prior to 0.69.0, the login page accepts a redirect parameter without validation, allowing attackers to redirect authenticated users to arbitrary external sites. This vulnerability is fixed in 0.69.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| leepeuker | movary | < 0.69.0 | — |