MediaCrush vulnerabilities
We track 2 vulnerabilities in MediaCrush products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 3, 2026.
2vulnerabilities
1critical
1high
0exploited
8.6average CVSS score
Latest MediaCrush vulnerabilities
- 9.8 Critical severity
Mediacrush: Unrestricted Upload of File with Dangerous Type
An issue was discovered in MediaCrush thru 1.0.1 allowing remote unauthenticated attackers to upload arbitrary files of any size to the /upload endpoint.
- 7.3 High severity
MediaCrush: Improper Neutralization of HTTP Headers for Scripting Syntax
A vulnerability was identified in MediaCrush 1.0.0/1.0.1. The affected element is an unknown function of the file /mediacrush/paths.py of the component Header Handler. Such manipulation of the argument Host leads to improper neutralization of http headers for