this post was submitted on 10 Jul 2023
3 points (100.0% liked)

General Lemmy.Cafe

218 readers
1 users here now

General site

founded 2 years ago
MODERATORS
[email protected]
3
Lemmy.world (and some others) were hacked - LemmyWorld (lemmy.world)
submitted 1 year ago by [email protected] to c/[email protected]
3 comments fedilink hide all child comments
 

It looks like several Lemmy instances were exploited last night. It doesn't appear that much damage has been done, but users may have to log out and back in if they use mobile apps.

@[email protected] have you found any indication that lemmy.cafe may have been targeted too?

top 3 comments
sorted by: hot top controversial new old
[–] [email protected] 3 points 1 year ago (2 children)

I've checked the admin activity, the logs - nothing suspicious.

I've also found the description of the vulnerability - it was an XSS attack abusing custom emojis.

I have never added any. I have also checked the database and there are no custom emojis on this instance. Everything appears to be fine for now. Will update to the fixed release as soon as it's available.

[–] [email protected] 3 points 1 year ago

Thanks a lot for your prompt response!