Comment on Umami is compromised - upgrade immediately

non_burglar@lemmy.world ⁨6⁩ ⁨days⁩ ago

• wildbus8979@sh.itjust.works ⁨6⁩ ⁨days⁩ ago

  github.com/umami-software/umami/issues/3852

  source

  • non_burglar@lemmy.world ⁨6⁩ ⁨days⁩ ago

    Thank you!

    source
• Mubelotix@jlai.lu ⁨6⁩ ⁨days⁩ ago

  All recently open issues are about this. I was a victim, but I’m not the first and people on reddit have done better investigations than I have. Look for the name of the process at the top

  source

  • non_burglar@lemmy.world ⁨6⁩ ⁨days⁩ ago

    Thanks.

    For severe incidents like this, please post the most appropriate link, in this case github.com/umami-software/umami/issues/3852

    Admins in self hosted usually don’t have that much experience with real, active compromise and may panic, let’s help them as much as possible.

    What was the vector? Did you have umami exposed publicly?

    source