Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-cw4m-8qhc-m96h

Опубликовано: 10 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.

Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.

EPSS

Процентиль: 72%
0.00701
Низкий

7.5 High

CVSS3

Дефекты

CWE-918

Связанные уязвимости

CVSS3: 7.5
nvd
почти 3 года назад

Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.

CVSS3: 7.5
debian
почти 3 года назад

Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request ...

EPSS

Процентиль: 72%
0.00701
Низкий

7.5 High

CVSS3

Дефекты

CWE-918