CVE-2020-26948 – Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image Ima

Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-26948

Reference (s):

• https://github.com/btnz-k/emby_ssrf
• https://github.com/btnz-k/emby_ssrf/blob/master/emby_scan.rb