TI-2026-29125 CVE-2026-40350
Incorrect authorization in leepeuker movary
Priority HIGH 73
Movary is a self hosted web app to track and rate a user's watched movies.
Vulnerabilities
8 records
TI-2026-29124 CVE-2026-40349
Authenticated Movary User Can Self-Escalate to Administrator via PUT /settings/users/{userId} by Setting isAdmin=true
Priority HIGH 73
Movary is a self hosted web app to track and rate a user's watched movies.
TI-2026-29123 CVE-2026-40348
Movary has Authenticated SSRF via Jellyfin Server URL Verification that Allows Internal Network Probing
Priority HIGH 67
Movary is a self hosted web app to track and rate a user's watched movies.
TI-2026-19204 CVE-2026-23841
Movary vulnerable to Cross-site Scripting with `?categoryCreated=` param
Priority MEDIUM 42
Movary is a web application to track, rate and explore your movie watch history.
TI-2026-19203 CVE-2026-23840
Movary vulnerable to Cross-site Scripting with `?categoryDeleted=` param
Priority HIGH 75
Movary is a web application to track, rate and explore your movie watch history.
TI-2026-19202 CVE-2026-23839
Movary vulnerable to Cross-site Scripting with `?categoryUpdated=` param
Priority HIGH 75
Movary is a web application to track, rate and explore your movie watch history.
Priority LOW 23
Movary is a web application to track, rate and explore your movie watch history.
TI-2025-39567 CVE-2025-64116
Movary vulnerable to an open redirect
Priority MEDIUM 56
Movary is a web application to track, rate and explore your movie watch history.