Lucene search
+L

1 matches found

OSV
OSV
added 2025/09/09 7:59 p.m.8 views

CVE-2025-58761 Tautulli vulnerable to Unauthenticated Path Traversal in `real_pms_image_proxy`

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. The realpmsimageproxy endpoint in Tautulli v2.15.3 and prior is vulnerable to path traversal, allowing unauthenticated attackers to read arbitrary files from the application server's filesystem. The realpmsimageproxy i...

8.6CVSS6.9AI score
SaveExploits0References4
Rows per page
Query Builder