Comment

Comment on Jellyfin / Remote Access Help (windows)

CompactFlax@discuss.tchncs.de ⁨1⁩ ⁨week⁩ ago

Jellyfin has a pile of security issues regarding unauthenticated enumeration of the media that’s shared. That’s probably not awesome on the public internet.

I’d suggest setting up Tailscale. github.com/jellyfin/jellyfin/issues/5415

Sort:hotnew top

sneezycat@sopuli.xyz ⁨1⁩ ⁨week⁩ ago
From the issue you shared:

Thank you b4too - unless something new has been uncovered - which if so should be reported to us via our responsible disclosure policy - it is NOT possible to arbitrarily enumerate all media on a server without authentication, and saying as much is massive fear-mongering

source
ryan_harg@discuss.tchncs.de ⁨1⁩ ⁨week⁩ ago
unauthenticated playback: yes. enumeration: no

source