‹ Retour à la liste

CVE-2021-25827

9.8 Critique

Publiée le 28/06/2023 à 22:15 · Modifiée le 24/10/2026 à 15:10 · Modifiée · Source : cve@mitre.org

Description

Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address.

Traduire en français

Produits concernés

Emby emby

Scores CVSS

Version	Score	Source	Vecteur
3.1	9.8 Critique	nvd@nist.gov (NVD)	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`

Faiblesses (CWE)

CWE-290

Références

https://emby.media/community/index.php?/topic/98191-emby-server-46-released/ Product
https://github.com/EmbySupport/security/security/advisories/GHSA-fffj-6fr6-3fgf Not Applicable
https://github.com/MediaBrowser/Emby/issues/3784 ExploitIssue TrackingThird Party Advisory
https://emby.media/community/index.php?/topic/98191-emby-server-46-released/ Product
https://github.com/EmbySupport/security/security/advisories/GHSA-fffj-6fr6-3fgf Not Applicable
https://github.com/MediaBrowser/Emby/issues/3784 ExploitIssue TrackingThird Party Advisory

Ailleurs