CVE-2022-35910

In Jellyfin before 10.8, stored XSS allows theft of an admin access token

published August 19, 2022

CVSS
—
EPSS
1%
Percentile
58.5
In the wild
Unconfirmed
What it is

In Jellyfin before 10.8, stored XSS allows theft of an admin access token.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00873 · 58.5th percentile
Published
2022-08-19T11:52Z
EPSS history
Timeline
  • 19 AUG 11:52Z
    In Jellyfin before 10.8, stored XSS allows theft of an admin access token
    cvelistv5