Lucene search
MitreCVELIST:CVE-2023-23636HistoryFeb 03, 2023 - 12:00 a.m.
CVE-2023-23636
2023-02-0300:00:00
mitre
www.cve.org
jellyfin
playlist
xss
vulnerability
access tokens
0.001 Low
EPSS
Percentile
26.3%
In Jellyfin 10.8.x through 10.8.3, the name of a playlist is vulnerable to stored XSS. This allows an attacker to steal access tokens from the localStorage of the victim.
Related
cve
cve
CVE-2023-23636
2023-02-03 01:15:14
prion
prion
Cross site scripting
2023-02-03 01:15:00
osv
osv
CVE-2023-23636
2023-02-03 01:15:14
nvd
nvd
CVE-2023-23636
2023-02-03 01:15:14