Server side request forgery (ssrf)

Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery SSRF via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request...

CVE-2023-27161

Jellyfin up to v10.7.7 was discovered to contain a Server-Side Request Forgery SSRF via the component /Repositories. This vulnerability allows attackers to access network resources and sensitive information via a crafted POST request...

CVE-2023-27161

CVE-2023-27161 affects Jellyfin up to version 10.7.7, with a Server-Side Request Forgery (SSRF) vulnerability via the /Repositories component. An attacker can craft a POST request to trigger access to network resources and expose sensitive data. Publicly referenced advisories corroborate the SSRF...