NuytsTech Security

CVE-2014-9181

by ·

Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrary files via a .. (dot dot) in the URI to (1) manage/ or (2) web/ or remote authenticated users to read arbitrary files via a .. (dot dot) in the URI to resources/.

Date published : 2014-12-02

http://www.securityfocus.com/archive/1/531290

https://forums.plex.tv/index.php/topic/62832-plex-media-server/?p=583250

Tags: