Comment on Plex vulnerabilities being exploited in the wild to drop a cryptominer
MangoPenguin@lemmy.blahaj.zone 21 hours ago
Jellyfin has plenty of issues with public instances too. It’s just the reality of exposing to the public internet, unless it’s something that has a lot of dedicated work going into security it’s going to have problems.
ITGuyLevi@programming.dev 20 hours ago
Could you specify any of those issues? I ask because the only one I’m tracking allows unauthenticated playback, but only if they know the path to the file on the machine which is very easy to change from default.
MangoPenguin@lemmy.blahaj.zone 13 hours ago
There have been a few major ones this year, I’m sure they are fixed at this point though. app.opencve.io/cve/?vendor=jellyfin