Code-Injection in Lemmy möglich - Feddit
feddit.de
Offenbar ist eine Code Injection mittels JavaScript in den Kommentaren gelungen. Damit können Admin-Cookies gestohlen werden und die Instanz gehört somit den Angreifern. Es wundert mich etwas, hier so gar nichts darüber zu lesen?

Is this also fixed on tchncs? Beehaw went offline to fix it, so I assume this is pretty important.

BTW thank you for hosting this instance!

  • MilanMA
    38·
    2 years ago

    The fix pr has been “merged” into our deployment some hours ago and we luckily dont have custom emojis yet :)

    • fatcatOP
      8·
      2 years ago

      Thank you so much! :) You are doing so much great work hosting all these services for the community.