CVE-2021-25827: Critical severity emby vulnerability
Published Jun 28, 2023
·Updated
Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address.
Affected Software
1 affected component
Emby Emby<4.7.12.0
Event History
Jun 28, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2021-25827?
The severity of CVE-2021-25827 is considered high due to its potential for unauthorized access.
2
How do I fix CVE-2021-25827?
To fix CVE-2021-25827, upgrade Emby Server to version 4.7.12.0 or later.
3
What is the impact of CVE-2021-25827?
The impact of CVE-2021-25827 allows attackers to bypass login authentication if the X-Forwarded-For header is manipulated.
4
Which versions of Emby Server are affected by CVE-2021-25827?
Emby Server versions prior to 4.7.12.0 are affected by CVE-2021-25827.
5
Who can exploit CVE-2021-25827?
Anyone with network access can exploit CVE-2021-25827 by sending a crafted X-Forwarded-For header.