Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address.

CVE-2021-25827 (CVE-2021-25827) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

Question 1

What is CVE-2021-25827 — CVE-2021-25827?

Accepted Answer

Emby Server < 4.7.12.0 is vulnerable to a login bypass attack by setting the X-Forwarded-For header to a local IP-address.

Question 2

What is the authoritative source for CVE-2021-25827?

Accepted Answer

CVE-2021-25827 (CVE-2021-25827) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2021-25827CVE-2021-25827

Description