23
(URGENT) Lemmy has an XSS vulnerability in the sidebar - sh.itjust.works (sh.itjust.works)
submitted 3 years ago* by to c/genzedong@lemmygrad.ml
10 comments fedilink hide all child comments
 

Both lemmy.world and lemmy.blahaj.zone are both down, this issue IS URGENT as this could be why they are both down.

@CriticalResist8@lemmygrad.ml @muad_dibber@lemmygrad.ml @CaptCalhoun@lemmygrad.ml @Farmer_Heck@lemmygrad.ml @felipeforte@lemmygrad.ml @ksynwa@lemmygrad.ml

other discussions
14
C'è una vulnerabilità in corso su lemmy, impatta anche feddit? (sh.itjust.works)
submitted 3 years ago by to c/caffeitalia@feddit.it
8 comments fedilink hide all child comments
56
Code-Injection in Lemmy möglich (sh.itjust.works)
submitted 3 years ago* by to c/main@feddit.de
11 comments fedilink hide all child comments
 

Offenbar ist eine Code Injection mittels JavaScript in den Kommentaren gelungen. Damit können Admin-Cookies gestohlen werden und die Instanz gehört somit den Angreifern.

Es wundert mich etwas, hier so gar nichts darüber zu lesen?

21
Lemmy.world et d’autres instances hackées (sh.itjust.works)
submitted 3 years ago* (last edited 3 years ago) by to c/france@lemmy.world
15 comments fedilink hide all child comments
 

Bon bah, ce qui devait arriver arriva. Plusieurs instances ont été victimes de hack via une injection XSS et vol d’identifiant des admins.

23
(URGENT) Lemmy has an XSS vulnerability in the sidebar - sh.itjust.works (sh.itjust.works)
submitted 3 years ago by to c/meta@aussie.zone
36 comments fedilink hide all child comments
 

https://sh.itjust.works/post/923025

1
Update to the lemmy.world hack, blahaj also hacked, maybe huge lemmy exploit? (sh.itjust.works)
submitted 3 years ago by to c/fediverse@hexbear.net
comment fedilink hide all child comments
 

I don't really understand what any of this means, maybe someone can explain it for me, I'm a little nervous to keep browsing on lemmygrad if this can apparently be exploited thru comments and posts or something?

there's disagreement about what's happening several comments down so an explanation would be appreciated