EventFrontier
  • Communities
  • Create Post
  • heart
    Support Lemmy
  • search
    Search
  • Login
  • Sign Up
taaz@biglemmowski.win to Lemmy@lemmy.mlEnglish ·
edit-2
10 months ago

Instance Owners: Do Not Use Lemmy-Thumbnail-Cleaner

message-square
message-square
6
fedilink
78
message-square

Instance Owners: Do Not Use Lemmy-Thumbnail-Cleaner

taaz@biglemmowski.win to Lemmy@lemmy.mlEnglish ·
edit-2
10 months ago
message-square
6
fedilink

If you are using https://github.com/wereii/lemmy-thumbnail-cleaner please stop and disable it as soon as possible.

We have found a security issue that allows any user to make LTC delete any locally hosted image.

I will be posting more details soon and editing this to include the information.

E: More information here https://github.com/wereii/lemmy-thumbnail-cleaner/issues/10

  • db0@lemmy.dbzer0.com
    link
    fedilink
    English
    arrow-up
    14
    ·
    10 months ago

    I’m really curious how someone can exploit a script that is meant to be running locally with no external facing interface

    • taaz@biglemmowski.winOP
      link
      fedilink
      English
      arrow-up
      5
      ·
      10 months ago

      Post edited with link to more information.

      • db0@lemmy.dbzer0.com
        link
        fedilink
        English
        arrow-up
        4
        ·
        10 months ago

        thanks

Lemmy@lemmy.ml

lemmy@lemmy.ml

Subscribe from Remote Instance

Create a post
You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: [email protected]

Everything about Lemmy; bugs, gripes, praises, and advocacy.

For discussion about the lemmy.ml instance, go to [email protected].

Visibility: Public
globe

This community can be federated to other instances and be posted/commented in by their users.

  • 1 user / day
  • 54 users / week
  • 324 users / month
  • 1.53K users / 6 months
  • 1 local subscriber
  • 13.1K subscribers
  • 1.16K Posts
  • 11.5K Comments
  • Modlog
  • mods:
  • Nutomic@lemmy.ml
  • BE: 0.19.8
  • Modlog
  • Instances
  • Docs
  • Code
  • join-lemmy.org