getumbrel/umbrel

getumbrel/umbrel

GitHubGitHub
GitHubgithub.com
umbrel.comumbrel.com
Releases110
Frequency2 weeks 5 days
Last Release
Stars11.3K
An elegant home server OS. Run OpenClaw, store your files and photos, run a Bitcoin node, and do more with over 300 apps in the Umbrel App Store.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2024-49379↗
——

Umbrel is a home server OS for self-hosting. The login functionality of Umbrel before version 1.2.2 contains a reflected cross-site scripting (XSS) vulnerability in use-auth.tsx. An attacker can specify a malicious redirect query parameter to trigger the vulnerability. If a JavaScript URL is passed to the redirect parameter the attacker provided JavaScript will be executed after the user entered their password and clicked on login. This vulnerability is fixed in 1.2.2.