submitted 11 months ago* (last edited 11 months ago) by to c/selfhosted@lemmy.world
 

Well I already have jellyfin running in a container, just have to figure out how to get mum's TV to work with it I guess

log in on a local IP and not the network name and it's working again. but I'll be moving to jellyfin from now

you are viewing a single comment's thread
view the rest of the comments
[–] 4 points 11 months ago (1 child)

What are the vulnerabilities?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 11 months ago

    there are some admin endpoints that are authenticated using any local IP, but the method they use allows spoofing the IP so those endpoints become accessible essentially without authentication

    there were some other issues to do with unauthenticated enumeration and playback of content i believe too

  • source
  • parent