Emby Server 跨站脚本漏洞

Emby Server is a personal media server software that supports storing, managing, and streaming personal media content with support for multiple device access. A cross-site scripting vulnerability exists in Emby Server. The vulnerability stems from some unknown handling of files/web/ and no detail...

PT-2023-28040 · Emby · Media Browser Emby Server

Name of the Vulnerable Software and Affected Versions: Media Browser Emby Server version 4.7.13.0 Description: A vulnerability was found in the processing of the file /web/, which leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and...

Emby Server Cross-Site Scripting Vulnerability (CNVD-2025-20434)

Emby Server is a personal media server software that supports storing, managing, and streaming personal media content with support for multiple device access. Emby Server suffers from a cross-site scripting vulnerability that stems from the presence of a reflected cross-site scripting XSS...

Unspecified Vulnerability in Emby Server

Emby Server is a personal media server software that supports storing, managing, and streaming personal media content with support for multiple device access. Emby Server suffers from a security vulnerability that originated from allowing an attacker to perform a login bypass attack by setting th...

Emby Server Proxy Header Spoofing Vulnerability (GHSA-fffj-6fr6-3fgf)

Emby Server is prone to a proxy header spoofing vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:emby:emby.releases...

Emby Server < 4.6.0.50 XSS Vulnerability

Emby Server is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2021-25827

Emby Server 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address...

CVE-2021-25827

Emby Server 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address...

CVE-2021-25828

Emby Server versions 4.6.0.50 is vulnerable to Cross Site Scripting XSS vulnerability via a crafted GET request to /web...

CVE-2021-25828

Emby Server versions 4.6.0.50 is vulnerable to Cross Site Scripting XSS vulnerability via a crafted GET request to /web...

CVE-2021-25828

Emby Server versions 4.6.0.50 is vulnerable to Cross Site Scripting XSS vulnerability via a crafted GET request to /web...

Cross site scripting

Emby Server versions 4.6.0.50 is vulnerable to Cross Site Scripting XSS vulnerability via a crafted GET request to /web...

Authentication flaw

Emby Server 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address...

PT-2023-12079 · Emby · Emby Server

Name of the Vulnerable Software and Affected Versions: Emby Server versions prior to 4.6.0.50 Description: The issue concerns a Cross Site Scripting XSS vulnerability. It can be exploited via a crafted GET request to the "/web" API endpoint. Recommendations: For Emby Server versions prior to...

PT-2023-12078 · Emby · Emby Server

Name of the Vulnerable Software and Affected Versions: Emby Server versions prior to 4.7.12.0 Description: The issue allows for a login bypass attack by setting the X-Forwarded-For header to a local IP address. This enables unauthorized access without proper credentials. Recommendations: For...

CVE-2021-25828

Emby Server versions 4.6.0.50 is vulnerable to Cross Site Scripting XSS vulnerability via a crafted GET request to /web...

Emby Server 安全漏洞

Emby Server is a personal media server software that supports storing, managing, and streaming personal media content with support for multiple device access. Emby Server suffers from a security vulnerability that originated from allowing an attacker to perform a login bypass attack by setting th...

CVE-2021-25827

Emby Server 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address...

Emby Server 跨站脚本漏洞

Emby Server is a personal media server software that supports storing, managing, and streaming personal media content with support for multiple device access. Emby Server suffers from a cross-site scripting vulnerability that stems from the presence of a reflected cross-site scripting XSS...

CVE-2021-25828

CVE-2021-25828 affects Emby Server prior to 4.6.0.50, with a Cross-Site Scripting (XSS) vulnerability exploitable via a crafted GET request to the /web endpoint. Root cause described in multiple sources as a reflected XSS vector; impact is limited to browser-side scripting (no server compromise d...