Advisories · Technology
jxxghp MoviePilot.
Every CVE that names jxxghp MoviePilot among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.1 Medium
jxxghp MoviePilot Workflow Fork Endpoint workflow.py WorkflowExecutor.restore_context deserialization
- jxxghp MoviePilot
- Insecure deserialization
- CWE-20
- CVSS 8.7 High
MoviePilot 3.1.5 Command Injection via ExecuteCommandTool
- jxxghp MoviePilot
- Command injection
- CWE-1427
- CVSS 5.3 Medium
jxxghp MoviePilot Application API improper authorization
- jxxghp MoviePilot
- Privilege escalation
- Broken access control
- CVSS 7.2 High
MoviePilot Path Traversal via Cloud Storage Download Handlers
- jxxghp MoviePilot
- Path traversal
- CVSS 7.0 High
MoviePilot v2 SSRF via /api/v1/system/img/{proxy} Endpoint
- jxxghp MoviePilot
- Server-side request forgery (SSRF)