Skip to content
OpenAdvisories

Package · NuGet

Jellyfin.Controller

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.8
    CVE-2023-30626

    Jellyfin vulnerable to directory traversal and file write causing arbitrary code execution

    Jellyfin is a free-software media system. Versions starting with 10.8.0 and prior to 10.8.10 and prior have a directory traversal vulnerability inside the `ClientLogController`, specifically `/ClientLog/Document`. When combined with a cross-site scripting vul…

    jellyfin jellyfin Jellyfin.Controller NuGet