Plex Media Server Remote Code Execution Vulnerability
Plex · Media Server
Date added (CISA)
2023-03-10
Remediation due
2023-03-31
Known ransomware use
Not indicated
Remediation priority
P2 — past CISA due date
Description
Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.