peppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 17 hours agoPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infoexternal-linkmessage-square74linkfedilinkarrow-up1242arrow-down14file-text
arrow-up1238arrow-down1external-linkPlex vulnerabilities being exploited in the wild to drop a cryptominerwww.boredhackerblog.infopeppericecream@lemmy.dbzer0.com to Selfhosted@lemmy.worldEnglish · 17 hours agomessage-square74linkfedilinkfile-text
The update got released over 2 months ago. So sensible admins should not be getting hit by this. Also I use Jellyfin btw.
minus-squarei_stole_ur_taco@lemmy.calinkfedilinkEnglisharrow-up29arrow-down1·15 hours agoSure explains why Plex was so cagey and uninformative when they emailed everyone to update their servers a couple months back. Not so much as a CVE report or change set. A vulnerability? No…. 4 of them. And they stack.
minus-squareSir. Haxalot@nord.publinkfedilinkEnglisharrow-up17·14 hours agoThat kind of is the proper way to handle this. You don’t want to hint bad actors where to look and give people some time to update.
Sure explains why Plex was so cagey and uninformative when they emailed everyone to update their servers a couple months back. Not so much as a CVE report or change set.
A vulnerability? No…. 4 of them. And they stack.
That kind of is the proper way to handle this. You don’t want to hint bad actors where to look and give people some time to update.