Plex Media Server before 1.43.3.10861 allows an authenticated user to request arbitrary internal or external addresses via the '/video/:/transcode/universal' path parameter.
CVSS
4.3
EPSS
0%
KEV
Yes
Exploitation
reported
CVE Published
38d ago · NVD
Added to TCL Advisory
11d ago · TCL Advisory
Added to CISA KEV
11d ago · CISA
Exploitation Status Changed
11d ago · TCL Advisory
NVD · Updated 11d ago
CISA KEV · Updated 12d ago