32
submitted 1 year ago* (last edited 1 year ago) by gavi@lemmynsfw.com to c/lemmynsfw@lemmynsfw.com

We have little information currently, but we may at least lock the site down for preemptive safety reasons. There seems to be a serious XSS vulnerability within lemmys code. We have disabled community creation temporarily and are contemplating taking the site down temporarily as well. Please find us below and stay safe, ya'll.

https://mastodon.world/@lemmynsfw https://matrix.to/#/#lemmynsfw:matrix.org

EDIT: For the time being we have disabled federation, new user sign ups, and community creation.

you are viewing a single comment's thread
view the rest of the comments
[-] Crackhappy@lemmynsfw.com 1 points 1 year ago

Good luck. The real problem is that bugs like this in your code that lead to easy XSS script loads like this tend to point to a bigger problem.

[-] cuck4mai@lemmynsfw.com 0 points 1 year ago

This is on top of the privacy concerns and huge potential for vote manipulation.

[-] astral_avocado@lemmynsfw.com 1 points 1 year ago

What are these concerns and are they unique to Lemmy vs other fediverse type software like Mastodon?

load more comments (1 replies)
this post was submitted on 10 Jul 2023
32 points (97.1% liked)

Lemmy NSFW

11864 readers
234 users here now

Updates about lemmynsfw.com

founded 1 year ago
MODERATORS