Skip Navigation

Meta (lemm.ee) @lemm.ee Navarian @lemm.ee 1y ago

lemm.ee response to current exploit situation

See Here, Here and Here for information about the current situation and the exploits being used.

--- UPDATE

Lemm.ee Admin @sunarus responded Here, TLDR is that Lemm.ee isn't vulnerable, would advise reading the message if you're still concerned.

You're viewing a single thread.

7 comments

Hey folks! I have spent this morning helping lemmy.world mitigate the issue. I have also sent out mitigation instructions to other admins as well.

For the particular exploit that was used on lemmy.world:

It does not spread through federation

lemm.ee was not vulnerable in the first place

As mentioned above, it has already been mitigated on lemmy.world

So there should not be any reason to defederate. I will continue monitoring and investigating, if further vulnerabilities pop up then I will adjust accordingly.
- Perfect! Thanks for all of your work to keep the Fediverse functioning. We appreciate you!
- You rock! Sorry if this is a stupid question, but if both instances are running the same version of Lemmy, why would lemmy.world be affected but not lemm.ee?
  
  Malicious custom emoji contained scripts that sent session cookies to the attackers.
  
  Makes sense! Thank you.
- Thank you for being a valuable resource for the lemmyverse as a whole!

7 comments