Threats tagged 'ghsa-736m-vhpm-7799'

Jellyfin versions up to 12.4 have an information disclosure vulnerability in the PlaylistsController.GetPlaylist function. Authenticated users can access hidden item IDs by requesting public or shared playlists. This allows restricted or parental-controlled users to obtain GUIDs of library items they should not access and potentially stream hidden media. The vulnerability has a low severity score and does not impact integrity or availability.