Plex Media Server < 0.9.9.3 Multiple Vulnerabilities

Plex Media Server is prone to multiple vulnerabilities. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you c...

CVE-2014-9304

Plex Media Server prior to 0.9.9.3 is affected. The issue allows remote attackers to bypass the web server whitelist, perform SSRF via multiple crafted X-Plex-Url headers to system/proxy, and take arbitrary administrative actions due to inconsistent processing in the backend request handler. Impa...