Collection of potential security issues in Jellyfin This is a non exhaustive list of potential security issues found in Jellyfin. Some of these might cause controversy. Some of these are design fla…

  • Saik0
    link
    fedilink
    English
    119 hours ago

    Oh, sure enough. Basic auth breaks the login function. I didn’t test it myself and didn’t think that it wouldn’t work for basic auth. I’ve put other auths in front of it and it works. So It’s not completely “misinformation”. Just annoying that the easiest most basic form of auth won’t work.

    • @jagged_circle@feddit.nl
      link
      fedilink
      English
      1
      edit-2
      18 hours ago

      What other auths can you put in front of it?

      The problem is that they’re (ab)using the Auth header, which causes a colission and you can’t load many required assets.

      • Saik0
        link
        fedilink
        English
        112 hours ago

        I was testing a 2fa based one the other weak and jellyfin was the service I decided to test with. Ultimately didnt like it so I rolled ot back.I’d have to go look it up to get you a name.