Get a Pentest and security assessment of your IT network.

Request a quote

CVE-2020-26948 – Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image Ima

March 7, 2022

Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26948

Reference (s):

https://github.com/btnz-k/emby_ssrf
https://github.com/btnz-k/emby_ssrf/blob/master/emby_scan.rb

12