Lucene search
+L

CVE-2020-26948

🗓️ 10 Oct 2020 20:12:31Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 199 Views🌐 WEB

Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Server-Side Request Forgery in Emby
22 Jul 202023:30
–githubexploit
circl
Circl
CVE-2020-26948
11 Oct 202000:35
–circl
cnvd
CNVD
Emby Server Cross-Site Request Forgery Vulnerability
20 Oct 202000:00
–cnvd
cvelist
Cvelist
CVE-2020-26948
10 Oct 202020:12
–cvelist
kitploit
Kitploit
emby_ssrf
13 Oct 202600:22
–kitploit
kittysploit
KittySploit
Emby < 4.5.0 - Server Server-Side Request Forgery Detection
28 Jul 202611:27
–kittysploit
metasploit
Metasploit
Emby SSRF HTTP Scanner
13 Jun 202117:55
–metasploit
metasploit
Metasploit
Emby Version Scanner
13 Jun 202117:55
–metasploit
nuclei
Nuclei
Emby < 4.5.0 - Server Server-Side Request Forgery
20 Oct 202602:05
–nuclei
nvd
NVD
CVE-2020-26948
10 Oct 202021:15
–nvd
Rows per page
NVD
Node
embyembyRange<4.5.0
ParameterPositionPathDescriptionCWE
ImageURLquery param/Items/RemoteSearch/ImageSSRF vulnerability in Emby Server before 4.5.0 via the ImageURL parameter in the Items/RemoteSearch/Image endpoint.CWE-918

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 03:08Current
8.2High risk
Vulners AI Score8.2
CVSS 27.5
CVSS 3.19.8
EPSS0.87154
199