PT-2019-20125 · Plex · Tautulli

Publicado 2019-02-19 · Atualizado 2019-02-19

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Tautulli version 2.1.26

Description The issue concerns a problem with handling a crafted Plex username, which leads to XSS when constructing the History page, specifically affecting the data/interfaces/default/history.html file.

Recommendations For Tautulli version 2.1.26, consider restricting the use of the History page until a patch is available, and avoid using crafted Plex usernames to minimize the risk of exploitation.

Correção

Identificadores relacionados

PYSEC-2019-255

Produtos afetados

Tautulli

Referências · 3

• https://github.com/Tautulli/Tautulli-Issues/issues/161 · Nota
• http://securityfocus.com/bid/107171 · Nota
• https://osv.dev/vulnerability/PYSEC-2019-255 · Aviso do Fabricante