CVE-2025-64116 — Movary vulnerable to an open redirect
Movary is a web application to track, rate and explore your movie watch history. Prior to 0.69.0, the login page accepts a redirect parameter without validation, allowing attack…
Published: 2025-10-30 · CVSS: 5.1 · CVSS 4.0
Movary is a web application to track, rate and explore your movie watch history. Prior to 0.69.0, the login page accepts a redirect parameter without validation, allowing attackers to redirect authenticated users to arbitrary external sites. This vulnerability is fixed in 0.69.0.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7