VULNERABILITY INTELLIGENCE
CVE-2025-13803
CVSS score7.3 HIGH
EPSS probability0.38%
CISA KEVNot currently listed
Published2025-12-01
Last modified2026-10-18
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Description
A vulnerability was identified in MediaCrush 1.0.0/1.0.1. The affected element is an unknown function of the file /mediacrush/paths.py of the component Header Handler. Such manipulation of the argument Host leads to improper neutralization of http headers for scripting syntax. The attack can be launched remotely.
Weakness classification
- cna@vuldb.com: CWE-644