PT-2020-6851
CVE-2020-5741
·
تاريخ النشر
2020-05-08
·
تاريخ التحديث
2025-11-02
الوصف من
CVSS 2.0
8.3
عاليةالمقاييسAV:N/AC:L/Au:M/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Plex Media Server (affected versions not specified)
Description
The issue concerns the deserialization of untrusted data in Plex Media Server, allowing a remote, authenticated attacker to execute arbitrary Python code. This can be exploited by an attacker to gain unauthorized access and execute malicious code. The vulnerability is related to the restoration of untrusted data in memory, which can lead to arbitrary code execution.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾