CVE-2024-32963: Navidrome Parameter Tampering vulnerability

May 1, 2024

Parameter tampering is a vulnerability where an attacker has the ability to manipulate parameter values in the HTTP requests.

References

github.com/advisories/GHSA-4jrx-5w4h-3gpm
github.com/navidrome/navidrome
github.com/navidrome/navidrome/security/advisories/GHSA-4jrx-5w4h-3gpm
nvd.nist.gov/vuln/detail/CVE-2024-32963

Detect and mitigate CVE-2024-32963 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →