CVE-2023-23635

creationtimestamp| type| source ---|---|--- 2023-02-03 07:25:20+00:00| seen| https://t.me/cibsecurity/57433...

CVE-2023-23635

Jellyfin 10.8.x through 10.8.3 is affected by a stored XSS in the name of a collection that can exfiltrate the victim’s access tokens from localStorage. This is documented across multiple sources (NVD, Red Hat, GHSA, OSV, etc.). The vulnerability impact is limited to confidentiality through token...