Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2022-35909

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-qwp3-5fw3-5wgv

Incorrect Access Control and Cross Site Scripting in Jellyfin In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality. This lack of access control can be leveraged to performe a cross site scripting attack.

gitlab/nuget/Jellyfin.Common/CVE-2022-35909

Incorrect Access Control and Cross Site Scripting in Jellyfin In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality.