Lucene search
PRIOn knowledge basePRION:CVE-2023-23635HistoryFeb 03, 2023 - 1:15 a.m.
Design/Logic Flaw
2023-02-0301:15:00
PRIOn knowledge base
www.prio-n.com
1
jellyfin
collection
xss
vulnerability
access tokens
localstorage
nvd
In Jellyfin 10.8.x through 10.8.3, the name of a collection is vulnerable to stored XSS. This allows an attacker to steal access tokens from the localStorage of the victim.
Related
osv
osv
CVE-2023-23635
2023-02-03 01:15:14
cvelist
cvelist
CVE-2023-23635
2023-02-03 00:00:00
nvd
nvd
CVE-2023-23635
2023-02-03 01:15:14
cve
cve
CVE-2023-23635
2023-02-03 01:15:14