CVE-2022-35910

Mô tả

Tham khảo

• docs.google.com/document/d/1cBXQrokCvWxKET4BKi3ZLtVp5gst6-MrGPgMKpfXw8Y/edit · Exploit
• jellyfin/jellyfin#7569 · Patch
• medium.com/stolabs/cve-2022-35909-cve-2022-35910-incorrect-access-control-and-xss-stored-to-jellyfin-967359c91058 · Exploit

Lỗ hổng khác của jellyfin

• CVE-2026-35034TRUNG BÌNH 6.5Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain a denial of service vulnerability in the SyncPlay gro…
• CVE-2026-35033NGHIÊM TRỌNG 9.1Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain an unauthenticated arbitrary file read vulnerability …
• CVE-2026-35032CAO 8.1Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain a vulnerability chain in the LiveTV M3U tuner endpoin…
• CVE-2026-35031CAO 8.8Jellyfin is an open source self hosted media server. Versions prior to 10.11.7 contain a vulnerability chain in the subtitle upload endpoint…
• CVE-2025-31499CAO 8.8Jellyfin is an open source self hosted media server. Versions before 10.10.7 are vulnerable to argument injection in FFmpeg. This can be lev…