Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Jellyfin 10.8.x through 10.8.3, the name of a collection is vulnerable to stored XSS. This allows an attacker to steal access tokens from the localStorage of the victim.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jellyfin 跨站脚本漏洞
Vulnerability Description
Jellyfin是一个免费软件媒体系统。可让您控制媒体的管理和流式传输。它是专有Emby和Plex的替代产品，可以通过多个应用程序将专用服务器中的媒体提供给最终用户设备。 Jellyfin 10.8.0 到10.8.3 版本存在安全漏洞，该漏洞源于会话令牌存储在 localStorage 中，攻击者利用该漏洞可以通过 javascript 提取它们。
CVSS Information
N/A
Vulnerability Type
N/A