FreshPorts - VuXML

This page displays vulnerability information about FreeBSD Ports.

The VUXML data was last processed by FreshPorts on 2024-11-19 19:12:13 UTC

List all Vulnerabilities, by package

List all Vulnerabilities, by date

k68

These are the vulnerabilities relating to the commit you have selected:

VuXML ID	Description
4ee322e9-e363-11ed-b934-b42e991fc52e	jellyfin -- Multiple vulnerabilities security-advisories@github.com reports: Jellyfin is a free-software media system. Versions starting with 10.8.0 and prior to 10.8.10 and prior have a directory traversal vulnerability inside the `ClientLogController`, specifically `/ClientLog/Document`. When combined with a cross-site scripting vulnerability (CVE-2023-30627), this can result in file write and arbitrary code execution. Version 10.8.10 has a patch for this issue. There are no known workarounds. Discovery 2023-04-24 Entry 2023-04-25 jellyfin < 10.8.10 CVE-2023-30626 https://nvd.nist.gov/vuln/detail/CVE-2023-30626 CVE-2023-30627 https://nvd.nist.gov/vuln/detail/CVE-2023-30627

VuXML ID

Description

4ee322e9-e363-11ed-b934-b42e991fc52e

jellyfin -- Multiple vulnerabilities

security-advisories@github.com reports:

Jellyfin is a free-software media system. Versions starting with 10.8.0 and prior to 10.8.10 and prior have a directory traversal vulnerability inside the `ClientLogController`, specifically `/ClientLog/Document`. When combined with a cross-site scripting vulnerability (CVE-2023-30627), this can result in file write and arbitrary code execution. Version 10.8.10 has a patch for this issue. There are no known workarounds.

Discovery 2023-04-24
Entry 2023-04-25
jellyfin

< 10.8.10

CVE-2023-30626
https://nvd.nist.gov/vuln/detail/CVE-2023-30626
CVE-2023-30627
https://nvd.nist.gov/vuln/detail/CVE-2023-30627