CVE-2022-35910

5.4

MEDIUMCVSS v3

Published

August 19, 2022

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

In Jellyfin before 10.8, stored XSS allows theft of an admin access token.

Docker Hub

< 10.8NVD

GitHubThe Free Software Media System - Server Backend & API

< 10.8NVD

GitLab

The Free Software Media Browser

< 10.8NVD

Python Package Index

< 10.8NVD

GitHub Container RegistryContainer image hosted on GitHub Container Registry

< 10.8NVD

GitHub Container RegistryContainer image hosted on GitHub Container Registry

< 10.8NVD

Docker Hub推荐使用 nyanmisaka/jellyfin (jellyfin开发组成员构建的镜像)

< 10.8NVD