44
Frigate NVR Critical RCE Vulnerability (lemmy.world)
submitted 7 months ago* by to c/selfhosted@lemmy.world
10 comments fedilink hide all child comments
 

Severity 9.1 - Authenticated user container escape.

The latest release fixes this.

See details here

you are viewing a single comment's thread
view the rest of the comments
[–] 7 points 7 months ago (7 children)

I'm not sure why anyone would want to expose Frigate of all things to the open internet.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 7 child comments
    •
  • [–] 6 points 7 months ago (6 children)

    So they could view their cameras while they're away?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 2 points 7 months ago (3 children)

    There are far better, more secure ways to do this. You could use a reverse proxy. You could use tailscale. You could use wireguard.

    The last thing you should do is open Frigate's port to the net.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 3 child comments
    •
  • [–] 2 points 7 months ago (2 children)

    Just answering the question you asked.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 1 point 7 months ago* (1 child)

    I know, but it seemed like there was confusion about my intended point, which is that you should never expose it to the open internet. It wasn't a question I really intended to be answered since I know that was their intention. My confusion is why do that when there are secure alternatives, some of which are easier than opening a port.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •