It looks like several Lemmy instances were exploited last night. It doesn't appear that much damage has been done, but users may have to log out and back in if they use mobile apps.
@Illecors@lemmy.cafe have you found any indication that lemmy.cafe may have been targeted too?
3 Comments
Illecors@lemmy.cafe · 3 pts · 3y
I've checked the admin activity, the logs - nothing suspicious.
I've also found the description of the vulnerability - it was an XSS attack abusing custom emojis.
I have never added any. I have also checked the database and there are no custom emojis on this instance. Everything appears to be fine for now. Will update to the fixed release as soon as it's available.
Skyline@lemmy.cafe · 3 pts · 3y
Thanks a lot for your prompt response!
Illecors@lemmy.cafe · 1 pts · 3y
Explanation of vulnerability