https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T16:01:02.604665+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-233233 EUVD-2026-233233 2026-10-23T16:01:02.648776+00:00 EUVD-2026-233233 https://cve.radiocsirt.org/vuln/fkie_cve-2023-50258 fkie_cve-2023-50258 2026-10-23T16:01:02.648810+00:00

Medusa is an automatic video library manager for TV shows. Versions prior to 1.0.19 are vulnerable to unauthenticated blind server-side request forgery (SSRF). The `testDiscord` request handler in `medusa/server/web/home/handler.py` does not validate the user-controlled `discord_webhook` variable and passes it to the `notifiers.discord_notifier.test_notify` method, then `_notify_discord` and finally `_send_discord_msg` method, which sends a POST request to the user-controlled URL on line 64 in `/medusa/notifiers/discord.py`, which leads to a blind server-side request forgery. This issue allows for crafting POST requests on behalf of the Medusa server. Version 1.0.19 contains a fix for the issue.

 https://cve.radiocsirt.org/vuln/gsd-2023-50258 gsd-2023-50258 2026-10-23T16:01:02.648844+00:00 gsd-2023-50258