Emby MediaServer 3.2.5 Reflected Cross Site Scripting

Discussion in 'News Aggregator' started by Packet Storm, 2 May 2017.

  1. Packet Storm

    Packet Storm Guest

    Emby MediaServer version 3.2.5 suffers from a XSS issue due to a failure to properly sanitize user-supplied input to the URL path filename when handling 'not found' errors. Attackers can exploit this weakness to execute arbitrary HTML and script code in a user's browser session.

    Continue reading...
     
    #1 Packet Storm, 2 May 2017
(You must log in or sign up to post here.)

Share This Page

Loading...