CVE-2023-50266

Bazarr manages and downloads subtitles. In version 1.2.4, the proxy method in bazarr/bazarr/app/ui.py does not validate the user-controlled protocol and url variables and passes them to requests.get() without any sanitization, which leads to a blind server-side request forgery (SSRF). This issue allows for crafting GET requests to internal and external resources on behalf of the server. 1.3.1 contains a partial fix, which limits the vulnerability to HTTP/HTTPS protocols.

• CWE-918

• https://github.com/morpheus65535/bazarr/commit/17add7fbb3ae1919a40d505470d499d46df9ae6bPatch
• https://github.com/morpheus65535/bazarr/releases/tag/v1.3.1Release Notes
• https://securitylab.github.com/advisories/GHSL-2023-192_GHSL-2023-194_bazarr/Patch, Third Party Advisory
• https://github.com/morpheus65535/bazarr/commit/17add7fbb3ae1919a40d505470d499d46df9ae6bPatch
• https://github.com/morpheus65535/bazarr/releases/tag/v1.3.1Release Notes
• https://securitylab.github.com/advisories/GHSL-2023-192_GHSL-2023-194_bazarr/Patch, Third Party Advisory

Published

Dec 15, 2023

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-5026A vulnerability classified as problematic has been found in …6.1
• CVE-2023-50260Wazuh is a free and open source platform used for threat pre…8.8
• CVE-2023-50262Dompdf is an HTML to PDF converter for PHP. When parsing SVG…7.5
• CVE-2023-50263Nautobot is a Network Source of Truth and Network Automation…5.3
• CVE-2023-50264Bazarr manages and downloads subtitles. Prior to 1.3.1, Baza…7.5
• CVE-2023-50265Bazarr manages and downloads subtitles. Prior to 1.3.1, the …7.5
• CVE-2023-50267MeterSphere is a one-stop open source continuous testing pla…4.3
• CVE-2023-50268jq is a command-line JSON processor. Version 1.7 is vulnerab…5.5
• CVE-2023-50269Squid is a caching proxy for the Web. Due to an Uncontrolled…7.5
• CVE-2023-5027A vulnerability classified as critical was found in SourceCo…7.5
• CVE-2023-50270Session Fixation Apache DolphinScheduler before version 3.2.…6.5
• CVE-2023-50271 A potential security vulnerability has been identified with…7.5