CVE-2025-13803

Name of the Vulnerable Software and Affected Versions MediaCrush versions 1.0.0 through 1.0.1

Description A flaw exists in MediaCrush that involves improper neutralization of HTTP headers for scripting syntax. This issue is located within an unknown function of the /mediacrush/paths.py file, part of the Header Handler component. Manipulation of the Host argument can be leveraged to exploit this issue remotely.

Recommendations MediaCrush version 1.0.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability. MediaCrush version 1.0.1: At the moment, there is no information about a newer version that contains a fix for this vulnerability.