Open Redirect Vulnerability in Movary Web Application by Leepeuker

CVE-2025-64115

What is CVE-2025-64115?

The Movary web application, designed for tracking and rating movies, has a vulnerability that exposes users to open redirect risks. By utilizing the HTTP Referer header value directly in multiple settings endpoints, an attacker can manipulate URLs. This flaw permits crafted links to redirect users to malicious sites, potentially facilitating phishing attacks. This vulnerability affects all versions prior to 0.69.0, which addresses the issue.

References