Threats tagged 'ghsa-5hqc-9wxw-2gfq'

Jellyfin versions through 12.4 have a server-side request forgery (SSRF) vulnerability that allows authenticated users to bypass the SvgSecurityValidator by embedding gzip-compressed SVG content within non-SVG image data URIs. This enables attackers to upload crafted profile images via the POST /UserImage endpoint and then trigger unauthenticated rendering through GET /UserImage, potentially fetching internal URLs, reading local image files, or causing memory exhaustion.