Possible security issue?

0 Vote(s) - 0 Average

Possible security issue?

Hotlinks to media files may work with no auth credentials

TheDreadPirate
Offline

Community Moderator

Posts: 14,104
Threads: 10
Joined: 2023 Jun
Reputation: 424
Country: United States

2025-02-17, 02:55 PM

The "Copy Stream URL" link includes an api_key. This is how the link is authenticating. If you were to log out of the session you used to create the link, the api_key used would no longer be valid and the link would no longer work.

Jellyfin 10.10.6 (Docker)
Ubuntu 24.04.2 LTS w/HWE
Intel i3 12100
Intel Arc A380
OS drive - SK Hynix P41 1TB
Storage
4x WD Red Pro 6TB CMR in RAIDZ1

« Next Oldest | Next Newest »

Users browsing this thread: 1 Guest(s)

Messages In This Thread

Possible security issue? - by JoeG - 2025-02-17, 02:09 AM

RE: Possible security issue? - by TheDreadPirate - 2025-02-17, 02:55 PM

View a Printable Version
Subscribe to this thread

Login

Username/Email:
Password:


Or login with a social network below

Login

Username/Email:
Password:


Or login with a social network below