CVE-2018-21031

Mô tả

Tham khảo

• forums.plex.tv/t/security-regarding-cve-2018-21031/493286 · Third Party Advisory
• twitter.com/GerardFuguet/status/1009937529573912576 · Third Party Advisory
• elladodelmal.com/2018/08/shodan-es-de-cine-hacking-tautulli-un.html · Exploit
• exploit-db.com/docs/47790 · Exploit

Lỗ hổng khác của media server

• CVE-2026-96656CAO 7.2ĐANG BỊ KHAI THÁC (CISA KEV)Plex Media Server before 1.43.3.10861 allows an admin user to write arbitrary files that may be executed on load. The preference TranscoderH…
• CVE-2026-96655TRUNG BÌNH 4.3ĐANG BỊ KHAI THÁC (CISA KEV)Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/tra…
• CVE-2026-96654TRUNG BÌNH 6.5ĐANG BỊ KHAI THÁC (CISA KEV)Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other p…
• CVE-2026-96652TRUNG BÌNH 4.3ĐANG BỊ KHAI THÁC (CISA KEV)Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in…
• CVE-2026-96651TRUNG BÌNH 6.5Plex Media Server before 1.43.3.10861 builds a file path from the url parameter without checking it for ../ sequences, allowing path travers…