CVE-2023-23635 (jellyfin)

Feb. 3, 2023, 1:15 a.m. |

National Vulnerability Database web.nvd.nist.gov

In Jellyfin 10.8.x through 10.8.3, the name of a collection is vulnerable to stored XSS. This allows an attacker to steal access tokens from the localStorage of the victim.

access access tokens collection cve localstorage name steal stored xss tokens victim vulnerable xss

Visit resource

More from web.nvd.nist.gov / National Vulnerability Database

CVE-2023-45955 (lightstrip_firmware) 5 months, 3 weeks ago | web.nvd.nist.gov

attackers cve denial of service issue +1

CVE-2023-40101 (android) 5 months, 3 weeks ago | web.nvd.nist.gov

android check collapse cve +7

CVE-2023-21377 (android) 5 months, 3 weeks ago | web.nvd.nist.gov

android bypass cve disclosure +8

CVE-2023-21380 (android) 5 months, 3 weeks ago | web.nvd.nist.gov

android bluetooth buffer buffer overflow +9

CVE-2023-21382 (android) 5 months, 3 weeks ago | web.nvd.nist.gov

access android check cve +11

CVE-2023-21381 (android) 5 months, 3 weeks ago | web.nvd.nist.gov

android arbitrary code code code execution +10

CVE-2023-21385 (android) 5 months, 3 weeks ago | web.nvd.nist.gov

android corruption cve disclosure +7

CVE-2023-21387 (android) 5 months, 3 weeks ago | web.nvd.nist.gov

android backup bypass cve +11

CVE-2023-21389 (android) 5 months, 3 weeks ago | web.nvd.nist.gov

android bypass check cve +10

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Security Audit and Compliance Technical Analyst

@ Accenture Federal Services | Washington, DC

View on infosec-jobs.com

ICS Cyber Threat Intelligence Analyst

@ STEMBoard | Arlington, Virginia, United States

View on infosec-jobs.com

Cyber Operations Analyst

@ Peraton | Arlington, VA, United States

View on infosec-jobs.com

Cybersecurity – Information System Security Officer (ISSO)

@ Boeing | USA - Annapolis Junction, MD

View on infosec-jobs.com

Network Security Engineer I - Weekday Afternoons

@ Deepwatch | Remote

View on infosec-jobs.com

View more jobs

all InfoSec news

CVE-2023-23635 (jellyfin)

More from web.nvd.nist.gov / National Vulnerability Database

Jobs in InfoSec / Cybersecurity

SOC 2 Manager, Audit and Certification

Security Audit and Compliance Technical Analyst

ICS Cyber Threat Intelligence Analyst

Cyber Operations Analyst

Cybersecurity – Information System Security Officer (ISSO)

Network Security Engineer I - Weekday Afternoons