6 ms·

Lemmy.world Defaced

• k_roy 3y ago
  Right now, lemmy.world seems to be switching between "Site has been seized by Reddit for copyright infringment" and a tasteless mp4
• brucethemoose2 3y ago
  Its just down for me.
• r721 3y ago
  Archived defaced version: https://archive.is/wbQ2f https://archive.is/wbQ2f
• freddyfred 3y ago
  [flagged]
• 0l 3y ago
  XSS vuln apparently: https://lemmy.ml/post/1896249 https://lemmy.ml/post/1896249
• ranguna 3y ago
  For anyone wondering, this was the fix for the vulnerability that allowed people to gain access: https://github.com/LemmyNet/lemmy-ui/pull/1897/files https://github.com/LemmyNet/lemmy-ui/pull/1897/files
• tentacleuno 3y ago
  Looks like it was related to https://news.ycombinator.com/item?id=36664097 https://news.ycombinator.com/item?id=36664097. Absolutely ridiculous that the XSS vulnerability wasn't responsibly disclosed.