General Lemmy.Cafe

217 readers

2 users here now

General site

founded 2 years ago

MODERATORS

Illecors@lemmy.cafe

Lemmy.world (and some others) were hacked - LemmyWorld (lemmy.world)

submitted 2 years ago by Skyline@lemmy.cafe to c/general@lemmy.cafe

2 comments fedilink hide all child comments

It looks like several Lemmy instances were exploited last night. It doesn't appear that much damage has been done, but users may have to log out and back in if they use mobile apps.

@Illecors@lemmy.cafe have you found any indication that lemmy.cafe may have been targeted too?

top 2 comments

sorted by: hot top controversial new old

[–] Illecors@lemmy.cafe 1 points 2 years ago (1 children)

I've checked the admin activity, the logs - nothing suspicious.

I've also found the description of the vulnerability - it was an XSS attack abusing custom emojis.

I have never added any. I have also checked the database and there are no custom emojis on this instance. Everything appears to be fine for now. Will update to the fixed release as soon as it's available.

[–] Skyline@lemmy.cafe 1 points 2 years ago

Thanks a lot for your prompt response!