Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-9181.
AI-analyzed exploit summary This advisory details an authentication bypass via SSRF and local file disclosure in Plex Media Server. The SSRF exploit leverages header manipulation to bypass whitelist validation, while the file disclosure relies on directory traversal in unauthenticated endpoints.
Description
Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrary files via a .. (dot dot) in the URI to (1) manage/ or (2) web/ or remote authenticated users to read arbitrary files via a .. (dot dot) in the URI to resources/.
Exploits (1)
This advisory details an authentication bypass via SSRF and local file disclosure in Plex Media Server. The SSRF exploit leverages header manipulation to bypass whitelist validation, while the file disclosure relies on directory traversal in unauthenticated endpoints.