submitted 2 months ago* (last edited 2 months ago) by taaz@biglemmowski.win to c/lemmy@lemmy.ml

6 comments fedilink hide all child comments

If you are using https://github.com/wereii/lemmy-thumbnail-cleaner please stop and disable it as soon as possible.

We have found a security issue that allows any user to make LTC delete any locally hosted image.

I will be posting more details soon and editing this to include the information.

you are viewing a single comment's thread
view the rest of the comments

[-] db0@lemmy.dbzer0.com 14 points 2 months ago

I'm really curious how someone can exploit a script that is meant to be running locally with no external facing interface

[-] taaz@biglemmowski.win 5 points 2 months ago

Post edited with link to more information.

[-] db0@lemmy.dbzer0.com 4 points 2 months ago

thanks

this post was submitted on 17 Jul 2024

78 points (100.0% liked)

Lemmy

11947 readers

82 users here now

Everything about Lemmy; bugs, gripes, praises, and advocacy.

For discussion about the lemmy.ml instance, go to !meta@lemmy.ml.

founded 4 years ago

MODERATORS