CVE-2022-36223: XSS
In Emby Server 4.6.7.0, the playlist name field is vulnerable to XSS stored where it is possible to steal the administrator access token and flip or steal the media server administrator account.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-36223?
CVE-2022-36223 is classified as a high severity vulnerability due to the potential for an attacker to steal administrator access tokens.
How do I fix CVE-2022-36223?
To fix CVE-2022-36223, upgrade to a patched version of Emby Server that addresses the XSS stored vulnerability.
What types of attacks can result from CVE-2022-36223?
CVE-2022-36223 can lead to stored cross-site scripting (XSS) attacks, potentially allowing unauthorized access to the admin account.
How can CVE-2022-36223 impact my media server?
CVE-2022-36223 can compromise your media server's security by allowing attackers to take control of the administrator account.
What versions of Emby Server are affected by CVE-2022-36223?
Emby Server version 4.6.7.0 is affected by CVE-2022-36223.