peppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 1 day agoPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infoexternal-linkmessage-square110linkfedilinkarrow-up1313arrow-down17file-text
arrow-up1306arrow-down1external-linkPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infopeppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 1 day agomessage-square110linkfedilinkfile-text
The update got released over 2 months ago. So sensible admins should not be getting hit by this. Also I use Jellyfin btw.
minus-squarei_stole_ur_taco@lemmy.calinkfedilinkEnglisharrow-up38arrow-down2·1 day agoSure explains why Plex was so cagey and uninformative when they emailed everyone to update their servers a couple months back. Not so much as a CVE report or change set. A vulnerability? No…. 4 of them. And they stack.
minus-squareSir. Haxalot@nord.publinkfedilinkEnglisharrow-up32·1 day agoThat kind of is the proper way to handle this. You don’t want to hint bad actors where to look and give people some time to update.
Sure explains why Plex was so cagey and uninformative when they emailed everyone to update their servers a couple months back. Not so much as a CVE report or change set.
A vulnerability? No…. 4 of them. And they stack.
That kind of is the proper way to handle this. You don’t want to hint bad actors where to look and give people some time to update.