VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Oct 30, 2025· Updated Jun 17, 2026

CVE-2025-64115

CVE-2025-64115

Description

Movary is a web application to track, rate and explore your movie watch history. Versions up to and including 0.68.0 use the HTTP Referer header value directly for redirects in multiple settings endpoints, allowing a crafted link to cause an open redirect to an attacker-controlled site and facilitate phishing. This vulnerability is fixed in 0.69.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Leepeuker/Movaryv53 versions
    < 0.69.0+ 2 more
    • (no CPE)range: < 0.69.0
    • cpe:2.3:a:leepeuker:movary:*:*:*:*:*:*:*:*range: <0.69.0
    • (no CPE)range: <=0.68.0
  • Movary/Movaryllm-create
    Range: <=0.68.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.