Jellyfin Forum
wizard seems insecure - Printable Version

+- Jellyfin Forum (https://forum.jellyfin.org)
+-- Forum: Support (https://forum.jellyfin.org/f-support)
+--- Forum: General Questions (https://forum.jellyfin.org/f-general-questions)
+--- Thread: wizard seems insecure (/t-wizard-seems-insecure)



wizard seems insecure - noname - 2024-12-01

Hello,
Just setup jellyfin.  if I go to: 

Code:
http://[IP ADDRESS]:8096/web/index.html#!/wizardstart.html

I can just overwrite the admin user and password with whatever .... is this normal?  Maybe I need to read more.... LOL






RE: wizard seems insecure - niels - 2024-12-01

And have you tried actually doing that too? Because I'm quite sure it won't so anything.


RE: wizard seems insecure - Venson - 2024-12-01

this works because you are still "logged in" as an admin user though the sites cookies.
Try it in an private window and you will get an error as soon as you try to actually submit something.