CVE-2014-9181

Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrary files via a .

published December 2, 2014

CVSS
—
EPSS
9%
Percentile
95.4
In the wild
Unconfirmed
What it is

Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrary files via a .. (dot dot) in the URI to (1) manage/ or (2) web/ or remote authenticated users to read arbitrary files via a .. (dot dot) in the URI to resources/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.09484 · 95.4th percentile
Published
2014-12-02T16:00Z
EPSS history
Timeline
  • 02 DEC 16:00Z
    Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrary files via a .
    cvelistv5