PT-2020-6851

CVE-2020-5741

·

Published

2020-05-08

·

Updated

2025-11-02

Description by

CVSS 2.0
8.3
High
MetricsAV:N/AC:L/Au:M/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Plex Media Server (affected versions not specified)
Description The issue concerns the deserialization of untrusted data in Plex Media Server, allowing a remote, authenticated attacker to execute arbitrary Python code. This can be exploited by an attacker to gain unauthorized access and execute malicious code. The vulnerability is related to the restoration of untrusted data in memory, which can lead to arbitrary code execution.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾