medium6.1
CVE-2025-64116
Movary is a web application to track, rate and explore your movie watch history.
Impact
Movary is a web application to track, rate and explore your movie watch history. Prior to 0.69.0, the login page accepts a redirect parameter without validation, allowing attackers to redirect authenticated users to arbitrary external sites. This vulnerability is fixed in 0.69.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Leepeuker | Movary | before 0.69.0 |