this post was submitted on 10 Jul 2023
35 points (97.3% liked)

Lemmy NSFW

11805 readers
1 users here now

Updates about lemmynsfw.com

founded 2 years ago
MODERATORS
yay@lemmynsfw.com
MikeyMongol@lemmynsfw.com
gavi@lemmynsfw.com
Limeey@lemmynsfw.com
bobbiguy2122@lemmynsfw.com
metaconnoisseur@lemmynsfw.com
35
A serious vulnerability just discovered in lemmy is causing instances to be compromised. Please join our matrix room or follow us on mastodon for updates if we take the site down temporarily. (lemmynsfw.com)
submitted 2 years ago* (last edited 2 years ago) by gavi@lemmynsfw.com to c/lemmynsfw@lemmynsfw.com
3 comments fedilink hide all child comments
 

We have little information currently, but we may at least lock the site down for preemptive safety reasons. There seems to be a serious XSS vulnerability within lemmys code. We have disabled community creation temporarily and are contemplating taking the site down temporarily as well. Please find us below and stay safe, ya'll.

https://mastodon.world/@lemmynsfw https://matrix.to/#/#lemmynsfw:matrix.org

EDIT: For the time being we have disabled federation, new user sign ups, and community creation.

top 3 comments
sorted by: hot top controversial new old
[–] DelvianSeek@lemmynsfw.com 5 points 2 years ago

Thanks for the heads up! Sounds serious. Keeping fingers crossed that it will get fixed quickly.

[–] Crackhappy@lemmynsfw.com 3 points 2 years ago (1 children)

Good luck. The real problem is that bugs like this in your code that lead to easy XSS script loads like this tend to point to a bigger problem.

[–] gavi@lemmynsfw.com 2 points 2 years ago

I agree. There needs to be an audit of lemmy entire source.