CVE-2014-9304 in Plex Plex Media Serverinfo

Zusammenfassung (Englisch)

Plex Media Server before 0.9.9.3 allows remote attackers to bypass the web server whitelist, conduct SSRF attacks, and execute arbitrary administrative actions via multiple crafted X-Plex-Url headers to system/proxy, which are inconsistently processed by the request handler in the backend web server.

Reservieren

07.12.2014

Veröffentlichung

07.12.2014

Einträge

VulDB provides additional information and datapoints for this CVE:

ID	Schwachstelle	CWE	Aus	Mas	CVE
73133	Plex Plex Media Server Request erweiterte Rechte	264	Proof-of-Concept	Offizieller Fix	CVE-2014-9304

Beschreibung

CPE

CWE

CVSS

Exploits

History

Diff

Verknüpfen

Threat Intelligence

API JSON

API XML

API CSV

◂ ZurückÜbersichtWeiter ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!