Emby Server Cross-Site Request Forgery Vulnerability

Emby Server is a personal media server software that supports storing, managing, and streaming personal media content with support for multiple device access. Emby Server suffers from a cross-site request forgery vulnerability that allows an attacker to use SSRF via the ImageURL parameter of...

CVE-2020-26948: Server-Side Request Forgery (SSRF)

Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter...