Plex Media Server before 1.43.3.10861 does not correctly neutralize URL values included in 'searchOne,' allowing an attacker to call other plugins' functions and supply their own parameters.
CVSS
6.5
EPSS
0%
KEV
Yes
Exploitation
reported
CVE Published
38d ago · NVD
Added to TCL Advisory
11d ago · TCL Advisory
Added to CISA KEV
11d ago · CISA
Exploitation Status Changed
11d ago · TCL Advisory
NVD · Updated 11d ago
CISA KEV · Updated 12d ago