{"cvss":7.2,"datePublished":"2023-03-10","dateUpdated":"2023-03-10","description":"Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it.","dueDate":"2023-03-31","id":"CVE-2020-5741","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://forums.plex.tv/t/security-regarding-cve-2020-5741/586819; https://nvd.nist.gov/vuln/detail/CVE-2020-5741","product":"Media Server","requiredAction":"Apply updates per vendor instructions.","severity":"HIGH","source":"cisa_known_exploited","title":"Plex Media Server Remote Code Execution Vulnerability","vendor":"Plex"}