..:: tchncs ::.. · 1 year ago

XSS vulnerability fixed on tchncs?

8

20

XSS vulnerability fixed on tchncs?

..:: tchncs ::.. · 1 year ago

8

Code-Injection in Lemmy möglich - Feddit

Offenbar ist eine Code Injection mittels JavaScript in den Kommentaren gelungen. Damit können Admin-Cookies gestohlen werden und die Instanz gehört somit den Angreifern. Es wundert mich etwas, hier so gar nichts darüber zu lesen?

Is this also fixed on tchncs? Beehaw went offline to fix it, so I assume this is pretty important.

BTW thank you for hosting this instance!

Chat

MilanMA
link
fedilink
arrow-up
38·
edit-2
1 year ago
The fix pr has been “merged” into our deployment some hours ago and we luckily dont have custom emojis yet :)
- fatcatOP
  link
  fedilink
  arrow-up
  8·
  1 year ago
  Thank you so much! :) You are doing so much great work hosting all these services for the community.
- khaosoi
  link
  fedilink
  arrow-up
  6·
  1 year ago
  Thank you, Milan.
- heimchen
  link
  fedilink
  arrow-up
  1·
  1 year ago
  Thanks

..:: tchncs ::..

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !tchncs@discuss.tchncs.de

Your friendly https://tchncs.de community! Discuss whats happening in the tchncs world and/or just use it as a community forum.

German and english allowed.

If you are looking for a way to support tchncs, please check out https://tchncs.de/donate

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

1 user / day
1 user / week
107 users / month
426 users / 6 months
788 local subscribers
1.28K subscribers
113 Posts
936 Comments
Modlog

mods:
Milan