Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2023-23635
5.4
MEDIUMCVSS v3
Published
February 3, 2023
Affected
8 projects
Assigned by
MITRE
Severity scale
010
Description
In Jellyfin 10.8.x through 10.8.3, the name of a collection is vulnerable to stored XSS. This allows an attacker to steal access tokens from the localStorage of the victim.
Docker Hub
jellyfin/jellyfin-web
GitHubThe Free Software Media System - Official Web Client
GitHubThe Free Software Media System - Official Web Client>= 10.8.0, < 10.8.4NVD
jellyfin/jellyfin
GitHub
