CVE-2025-64325
Emby Server is Vulnerable to Remote Code Execution Through XSS in Admin Dashboard
概要
Emby Server is Vulnerable to Remote Code Execution Through XSS in Admin Dashboard
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Emby Server is a personal media server. Prior to version 4.8.1.0 and prior to Beta version 4.9.0.0-beta, a malicious user can send an authentication request with a manipulated X-Emby-Client value, which gets added to the devices section of the admin dashboard without sanitization. This issue has been patched in version 4.8.1.0 and Beta version 4.9.0.0-beta.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov