Plex Media Server before 1.43.3.10861 allows SSRF via '/player/timeline'. An attacker using any X-Plex-Token value can include a full URL in the 'protocol' parameter and force the Plex server to POST to the attacker's chosen destination.
CVSS
4.3
EPSS
0%
KEV
Yes
Exploitation
reported
CVE Published
38d ago · NVD
Added to TCL Advisory
10d ago · TCL Advisory
Added to CISA KEV
10d ago · CISA
Exploitation Status Changed
10d ago · TCL Advisory
NVD · Updated 10d ago
CISA KEV · Updated 12d ago