sh.itjust.works Main Community

7830 readers

14 users here now

Home of the sh.itjust.works instance.

founded 2 years ago

MODERATORS

Is s.itjust.works affected by the XSS Vulnerability? (self.main)

submitted 2 years ago by CannedTuna to c/main

12 comments fedilink hide all child comments

There’s plenty of posts on the topic about Lemmy.world being compromised, followed by the exploit being tracked back to an XSS exploit that I believe works on instances with custom emojis enabled. Many instances have been quick to jump on this such as feddit.uk and Behaw which took itself down temporarily.

Does this affect sh.itjust.works?

If so what are the admins doing about it?

Can we get some sort of admin post about this? Last update from them was some time ago.

Hopefully the admins have 2FA enabled on their accounts.

you are viewing a single comment's thread
view the rest of the comments

[–] TheDude 77 points 2 years ago (4 children)

Hey all,

As others mentioned we did not have custom emojis so we were not affected by this particular attack. I have since upgraded our UI to 0.18.2-rc.1 which mitigates this XSS vulnerability.

[–] Artemis 1 points 2 years ago (1 children)

I love that you chose TheDude for your account name as the admin of this instance. It just fits so well

[–] CannedTuna 1 points 2 years ago* (last edited 2 years ago)

The Dude abides.

Edit: [email protected] instead of “buy me a coffee”, it should be “buy me a White Russian”

load more comments (2 replies)