.. / CVE-2021-29490

• SSRF
• Nuclei
• Web

Exploit for Jellyfin 10.7.2 - Server Side Request Forgery (CVE-2021-29490)

Description:

Jellyfin is a free software media system. Versions 10.7.2 and below are vulnerable to unauthenticated Server-Side Request Forgery (SSRF) attacks via the imageUrl parameter.

Nuclei Template

View the template here CVE-2021-29490.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2021/CVE-2021-29490.yaml

References: