Skip to content
6.9 Medium

CVE-2025-13803 A vulnerability was identified in MediaCrush 1.0.0/1.0.1

Description

A vulnerability was identified in MediaCrush 1.0.0/1.0.1. The affected element is an unknown function of the file /mediacrush/paths.py of the component Header Handler. Such manipulation of the argument Host leads to improper neutralization of http headers for scripting syntax. The attack can be launched remotely.

Affected products and versions

Product Affected versions Fixed in
MediaCrush 1.0 1.0.0 → 1.0.1 No fix stated
Track this CVE