Comment on Plex vulnerabilities being exploited in the wild to drop a cryptominer
MangoPenguin@lemmy.blahaj.zone 1 week ago
Jellyfin has plenty of issues with public instances too. It’s just the reality of exposing to the public internet, unless it’s something that has a lot of dedicated work going into security it’s going to have problems.
ITGuyLevi@programming.dev 1 week ago
Could you specify any of those issues? I ask because the only one I’m tracking allows unauthenticated playback, but only if they know the path to the file on the machine which is very easy to change from default.
There have been a few major ones this year, I’m sure they are fixed at this point though. app.opencve.io/cve/?vendor=jellyfin