CVE-2022-35909

In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality

published August 19, 2022

CVSS
—
EPSS
2%
Percentile
76.2
In the wild
Unconfirmed
What it is

In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01644 · 76.2th percentile
Published
2022-08-19T11:52Z
EPSS history
Timeline
  • 19 AUG 11:52Z
    In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality
    cvelistv5