CVE-2025-64325

概要

参考情報

• EmbySupport/Emby.Security security advisory · Exploit

emby のその他の脆弱性

• CVE-2025-64113緊急 9.8Emby Server is a user-installable home media server. Versions below 4.9.1.81 allow an attacker to gain full administrative access to an Emby…
• CVE-2021-25828中 6.1Emby Server versions < 4.6.0.50 is vulnerable to Cross Site Scripting (XSS) vulnerability via a crafted GET request to /web.
• CVE-2021-25827緊急 9.8Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address.
• CVE-2022-36223中 6.1In Emby Server 4.6.7.0, the playlist name field is vulnerable to XSS stored where it is possible to steal the administrator access token and…
• CVE-2020-26948緊急 9.8Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.