Incorrect Access Control and Cross Site Scripting in Jellyfin
In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality.
Advisories for Nuget/Jellyfin.Common package
2022
In Jellyfin before 10.8, the /users endpoint has incorrect access control for admin functionality.