PT-2020-16565 · Emby · Emby Server

Published 2020-10-10 · Updated 2023-01-10 · CVE-2020-26948

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Emby Server versions prior to 4.5.0

Description The issue allows for Server-Side Request Forgery (SSRF) via the ImageURL parameter in the Items/RemoteSearch/Image endpoint. This means an attacker could potentially force the server to make unintended requests to internal or external resources.

Recommendations For Emby Server versions prior to 4.5.0, update to version 4.5.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the Items/RemoteSearch/Image endpoint or avoiding the use of the ImageURL parameter until the update is applied.

Exploit

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2020-26948

Affected Products

Emby Server

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/emby_ssrf_scanner.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/emby_version_ssrf.rb · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-26948 · Security Note
• https://osv.dev/vulnerability/CVE-2020-26948 · Vendor Advisory
• https://t.me/cibsecurity/15194 · Telegram Post
• https://github.com/btnz-k/emby_ssrf · Note
• https://github.com/btnz-k/emby_ssrf/blob/master/emby_scan.rb · Note
• https://t.me/cvenotify/41692 · Telegram Post