Описание
In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| jellyfin | itp | package |
Связанные уязвимости
CVSS3: 8.8
nvd
больше 3 лет назад
In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality.
CVSS3: 8.8
github
больше 3 лет назад
Incorrect Access Control and Cross Site Scripting in Jellyfin