Unscored CVE-2020-5740 EUVD-2020-26899GHSA-qmvf-m2cm-gm9v

Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated attacker to execute arbitrary Python code with SY…

Published Apr 22, 2020 · Updated Aug 4, 2024 · Assigned by tenable

Description

Improper Input Validation in Plex Media Server on Windows allows a local, unauthenticated attacker to execute arbitrary Python code with SYSTEM privileges.

Affected products

Vendor	Product	Affected	Fixed
—	Plex Media Server (Windows)	Versions prior to 1.19.2.2673-776106bc6	—

References

https://www.tenable.com/security/research/tra-2020-25