Login

wen o · 2024-01-25, 01:43 PM

No login required to access

/Items/c468674a982993e9d4b707d3584e6a79/Images/Primary

Content, this is a serious data breach problem

**niels** · 2024-01-25, 01:55 PM

This is known behavior and not a data breach

https://github.com/jellyfin/jellyfin/issues/5415

wen o · 2024-01-25, 03:03 PM

Is there any way to solve this problem?

tmsrxzar · 2024-01-25, 03:18 PM

(2024-01-25, 03:03 PM)wen o Wrote: Is there any way to solve this problem?

disable jellyfin-web
disable access to jellyfin-web

the expectation is that security will be handled external to jellyfin, jellyfin itself is not security hardened (at all)

**niels** · 2024-01-25, 03:28 PM

Disabling jellyfin-web has exactly zero effect since this is entirely within the server

Login

Username/Email:
Password:


Or login with a social network below

Login

Username/Email:
Password:


Or login with a social network below

SOLVED: data breach