CVE-2023-27161

7.5

HIGHCVSS v3

Published

March 10, 2023

Affected

7 projects

Assigned by

MITRE

Severity scale

010

Description

Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request.

linuxserver/jellyfin

Docker Hub

<= 10.7.7NVD

jellyfin/jellyfin

GitHubThe Free Software Media System - Server Backend & API

<= 10.7.7NVD

jellyfin/jellyfin

GitLab

More on this CVE

NVD↗GitHub Advisory↗

The Free Software Media Browser

<= 10.7.7NVD

jellyfin

Python Package Index

<= 10.7.7NVD

linuxserver/jellyfin

GitHub Container RegistryContainer image hosted on GitHub Container Registry

<= 10.7.7NVD

sleepgod/jellyfin

GitHub Container RegistryContainer image hosted on GitHub Container Registry

<= 10.7.7NVD

sleepgod/jellyfin

Docker Hub推荐使用 nyanmisaka/jellyfin (jellyfin开发组成员构建的镜像)

<= 10.7.7NVD

Security Advisories

CVE-2023-27161

Description

More on this CVE