Emby.Security vulnerabilities
1 known vulnerability in Emby.Security from EmbySupport. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.0average CVSS score
Latest first
- 9.0 Critical severity
Emby.Security: Improper Neutralization of Input During Web Page Generation
Emby Server is a personal media server. Prior to version 4.8.1.0 and prior to Beta version 4.9.0.0-beta, a malicious user can send an authentication request with a manipulated X-Emby-Client value, which gets added to the devices section of the admin dashboard