Web security bug

[quatre1love 3]

Hi devs,

The web emby has bug that will expose ther server details to the public even the server has used Cloudflare to protect the IP address.

Input: http://domain/emby/system/info/public, ex: http://demo.emby.tv/emby/system/info/public in the browser, it will show the server details with public IP address.

Please fix this bug ASAP for the security reason.

 

KIND REGARDS

[neik 870]

Only thing I see is:

- Server name
- Version
- ID

Which version are you on? I am on the latest beta.

[CBers 7121]

27 minutes ago, neik said:

Only thing I see is:

- Server name
- Version
- ID

Which version are you on? I am on the latest beta.

@quatre1love must be running Stable, as that does give back the IP address, when it doesn't in Beta. 

You would need to know the server URL in the first place to get that information. 

@Luke

Edited September 17, 2020 by CBers

[Q-Droid 881]

This is a known issue that is being worked on and why the beta does not return those details anymore.