Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
In Jellyfin 10.8.x through 10.8.3, the name of a playlist is vulnerable to stored XSS. This allows an attacker to steal access tokens from the localStorage of the victim.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jellyfin 跨站脚本漏洞
Vulnerability Description
Jellyfin是一个免费软件媒体系统。可让您控制媒体的管理和流式传输。它是专有Emby和Plex的替代产品，可以通过多个应用程序将专用服务器中的媒体提供给最终用户设备。 Jellyfin 10.8.x 版本到 10.8.3 版本存在安全漏洞，该漏洞源于 playlist 的名称容易受到存储型跨站脚本（XSS）的影响。
CVSS Information
N/A
Vulnerability Type
N/A