Morpheus65535 Bazarr
3 CVEs affecting Morpheus65535 Bazarr. Latest disclosed: 2023-12-15. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-50265 | High | 7.5 | 2023-12-15 | Bazarr manages and downloads subtitles. Prior to 1.3.1, the /api/swaggerui/static endpoint in bazarr/app/ui.py does not validate the user-controlled filename v… |
CVE-2023-50264 | High | 7.5 | 2023-12-15 | Bazarr manages and downloads subtitles. Prior to 1.3.1, Bazarr contains an arbitrary file read in /system/backup/download/ endpoint in bazarr/app/ui.py does no… |
CVE-2023-50266 | Medium | 5.3 | 2023-12-15 | Bazarr manages and downloads subtitles. In version 1.2.4, the proxy method in bazarr/bazarr/app/ui.py does not validate the user-controlled protocol and url va… |