PT-2023-28040 · Emby · Media Browser Emby Server

Whoamiechor · Publicado 2023-08-05 · Atualizado 2024-05-17 · CVE-2023-4167

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Media Browser Emby Server version 4.7.13.0

Description A vulnerability was found in the processing of the file /web/, which leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Recommendations For Media Browser Emby Server version 4.7.13.0, it is recommended to upgrade the affected component to a newer version. As a temporary workaround, consider restricting access to the /web/ file to minimize the risk of exploitation.

Exploit

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2023-4167

Produtos afetados

Media Browser Emby Server

Referências · 7

• 🔥 https://github.com/whoamiecho/vuls/blob/main/emby.md · Exploit
• https://t.me/cvenotify/79719 · Publicação no Telegram
• https://t.me/cvenotify/55849 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-4167 · Aviso do Fabricante
• https://vuldb.com/?ctiid.236183 · Nota
• https://vuldb.com/?id.236183 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-4167 · Nota de Segurança