peppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 2 days agoPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infoexternal-linkmessage-square131linkfedilinkarrow-up1359arrow-down16file-text
arrow-up1353arrow-down1external-linkPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infopeppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 2 days agomessage-square131linkfedilinkfile-text
The update got released over 2 months ago. So sensible admins should not be getting hit by this. Also I use Jellyfin btw.
minus-squareITGuyLevi@programming.devlinkfedilinkEnglisharrow-up4·14 hours agoCould you specify any of those issues? I ask because the only one I’m tracking allows unauthenticated playback, but only if they know the path to the file on the machine which is very easy to change from default.
minus-squareTaasz/Woof@lemmy.blahaj.zonelinkfedilinkEnglisharrow-up1·7 hours agoThere have been a few major ones this year, I’m sure they are fixed at this point though. https://app.opencve.io/cve/?vendor=jellyfin
Could you specify any of those issues? I ask because the only one I’m tracking allows unauthenticated playback, but only if they know the path to the file on the machine which is very easy to change from default.
There have been a few major ones this year, I’m sure they are fixed at this point though. https://app.opencve.io/cve/?vendor=jellyfin