- Vendor / Project
- Plex
- Product
- Media Server
- Date added
- Mar 10, 2023
- Due date
- Mar 31, 2023
- Known ransomware use
- Unknown
- CWEs
- CWE-502
Description
Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.
Required action
Apply updates per vendor instructions.