PT-2020-18663 · Plex · Plex Media Server

Chris Lyne · Published 2020-06-15 · Updated 2021-07-21 · CVE-2020-5742

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Plex Media Server versions prior to June 15, 2020

Description The issue is related to improper access control, allowing any origin to execute cross-origin application requests.

Recommendations For versions prior to June 15, 2020, update to a version released after June 15, 2020 to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2020-5742

Affected Products

Plex Media Server

References · 4

• 🔥 https://tenable.com/security/research/tra-2020-35 · Exploit
• https://osv.dev/vulnerability/CVE-2020-5742 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-5742 · Security Note
• https://t.me/cvenotify/4395 · Telegram Post