coldbraid

CVE-2020-5741 Plex Media Server

Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.

CVSS
not scored

CWE-502

On CISA’s exploited list

Plex Media Server Remote Code Execution Vulnerability

Added
2023-03-10
Federal patch deadline
2023-03-31
Ransomware use
not known