.. / CVE-2021-21402

• LFI
• Nuclei
• Web

Exploit for Jellyfin <10.7.0 - Local File Inclusion (CVE-2021-21402)

Description:

Jellyfin before 10.7.0 is vulnerable to local file inclusion. This issue is more prevalent when Windows is used as the host OS. Servers exposed to public Internet are potentially at risk.

Nuclei Template

View the template here CVE-2021-21402.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-21402.yaml

References: