Lemmy.world and another instance have been compromised

https://lemdro.id/post/42872

Lemmy.world and another instance have been compromised - Lemdro.id

cross-posted from: https://lemmy.ml/post/1895271 [https://lemmy.ml/post/1895271] > FYI!!! In case you start getting re-directed to porn sites. > > Maybe the admin got hacked? > > --------- > > edit: lemmy.blahaj.zone has also been hacked. beehaw.org [http://beehaw.org] is also down, possibly intentionally by their admins until the issue is fixed. > > Post discussing the point of vulnerability: https://lemmy.ml/post/1896249 [https://lemmy.ml/post/1896249]

Hey everyone, this exploit was present in the custom emoji feature of Lemmy. Because lemdro.id does not use custom emojis, we are not vulnerable at this time.