CVE-2025-64115
Medium
Description
Movary is a web application to track, rate and explore your movie watch history. Versions up to and including 0.68.0 use the HTTP Referer header value directly for redirects in multiple settings endpoints, allowing a crafted link to cause an open redirect to an attacker-controlled site and facilitate phishing. This vulnerability is fixed in 0.69.0.
SeverityMedium
CVSS6.1
Exploit probability—
ProductLeepeuker Movary
PublishedOct 30, 2025
First seenOct 30, 2025
Weakness typeCWE-601Open redirect
How to fix
Update
- leepeuker movary0.69.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| leepeuker movary | v < 0.69.0 | 0.69.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.