jellysweep vulnerabilities
1 known vulnerability in jellysweep from Jon4hz. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.9average CVSS score
Latest first
- 8.9 High severity
jellysweep: Server-Side Request Forgery
Jellysweep is a cleanup tool for the Jellyfin media server. In versions 0.12.1 and below, /api/images/cache, used to download media posters from the server, accepted a URL parameter that was directly passed to the cache package, which downloaded the poster fro