Plex Media Server Remote Code Execution Vulnerability

[FordGuy61]

Has something changed since 2020?

Run PMS 1.19.3 or later. Current is 1.31.1.6782.

Security: Regarding CVE-2020-5741

Hello, We have recently been made aware of a security vulnerability related to Plex Media Server. This issue allowed an attacker with access to the server administrator’s Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it. This could be done by setting the server data directory to overlap with the content location for a library on which Camera Upload was enabled. This issue could not be exploited without first gaining access to the server’…