Jellyfin是一个开源的媒体库，可以让您管理和流媒体您的电影、电视节目和音乐。它可以安装在您的家庭服务器上，或者使用云服务。Jellyfin支持多种设备，包括智能电视、游戏机、智能手机和平板电脑。
共找到 4 条公开漏洞记录
The Jellyfin media server exposed user information via the public users API endpoint. This endpoint could have leaked sensitive data including usernames, user IDs, server IDs, administrator status, password configuration, login activity, and user policies without authentication.
Jellyfin is a free software media system. Versions 10.7.2 and below are vulnerable to unauthenticated Server-Side Request Forgery (SSRF) attacks via the imageUrl parameter.
Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk.