Emby.Security
Approved changes feed: RSS · Atom
cpe:2.3:a:embysupport:emby.security:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Embysupport (cbb32fd8-74c8-520b-bada-35884a6f58d8) |
|---|---|
| Product | Emby.Security (6ae275c7-e805-5641-9d92-78fcc47695d2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-64325 |
vulnerable | 2026-06-08 07:39:18.383526 |
Emby Server is Vulnerable to Remote Code Execution Through XSS in Admin Dashboard
Emby Server is a personal media server. Prior to version 4.8.1.0 and prior to Beta version 4.9.0.0-beta, a malicious user can send an authentication request with a manipulated X-Emby-Client value, which gets added to the devices section of the admin dashboard without sanitization. This issue has been patched in version 4.8.1.0 and Beta version 4.9.0.0-beta.
Published: 2025-11-18T22:32:06.902Z
Updated: 2025-11-19T16:44:25.026Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.