Vulnerability Details : CVE-2020-26948
Public exploit exists!
Emby Server before 4.5.0 allows SSRF via the Items/RemoteSearch/Image ImageURL parameter.
Vulnerability category: Server-side request forgery (SSRF)
Products affected by CVE-2020-26948
- cpe:2.3:a:emby:emby:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2020-26948
14.49%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 96 %
Percentile, the proportion of vulnerabilities that are scored at or less
Metasploit modules for CVE-2020-26948
-
Emby SSRF HTTP Scanner
First seen: 2021-06-13auxiliary/scanner/http/emby_ssrf_scannerGenerates a `GET` request to the provided web servers and executes an SSRF against the targeted EMBY server. Returns the server header, HTML title attribute and location header (if set). This is useful for rapidly identifying web applications -
Emby Version Scanner
First seen: 2021-06-13auxiliary/scanner/http/emby_version_ssrfThis module attempts to identify the version of an Emby Media Server running on a host. If you wish to see all the information available, set VERBOSE to true. Use in conjunction with emby_ssrf_scanner to locate devices vulnerable to CVE-2020-26948. Aut
CVSS scores for CVE-2020-26948
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.5
|
HIGH | AV:N/AC:L/Au:N/C:P/I:P/A:P |
10.0
|
6.4
|
NIST | |
|
9.8
|
CRITICAL | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
3.9
|
5.9
|
NIST |
CWE ids for CVE-2020-26948
-
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.Assigned by: nvd@nist.gov (Primary)
References for CVE-2020-26948
-
https://github.com/btnz-k/emby_ssrf/blob/master/emby_scan.rb
emby_ssrf/emby_scan.rb at master · btnz-k/emby_ssrf · GitHubBroken Link;Third Party Advisory
-
https://github.com/btnz-k/emby_ssrf
GitHub - btnz-k/emby_ssrfThird Party Advisory
Jump to