Collection of potential security issues in Jellyfin This is a non exhaustive list of potential security issues found in Jellyfin. Some of these might cause controversy. Some of these are design fla…

  • @jagged_circle@feddit.nl
    link
    fedilink
    English
    1
    edit-2
    5 days ago

    What other auths can you put in front of it?

    The problem is that they’re (ab)using the Auth header, which causes a colission and you can’t load many required assets.

    • Saik0
      link
      fedilink
      English
      15 days ago

      I was testing a 2fa based one the other weak and jellyfin was the service I decided to test with. Ultimately didnt like it so I rolled ot back.I’d have to go look it up to get you a name.