CVE-2022-35909

8.8

HIGHCVSS v3

Published

August 19, 2022

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality.

Docker Hub

< 10.8NVD

GitHubThe Free Software Media System - Server Backend & API

< 10.8NVD

GitLab

The Free Software Media Browser

< 10.8NVD

Python Package Index

< 10.8NVD

GitHub Container RegistryContainer image hosted on GitHub Container Registry

< 10.8NVD

GitHub Container RegistryContainer image hosted on GitHub Container Registry

< 10.8NVD

Docker Hub推荐使用 nyanmisaka/jellyfin (jellyfin开发组成员构建的镜像)

< 10.8NVD