CVE-2019-19833

Published December 18th, 2019

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

In Tautulli 2.1.9, CSRF in the /shutdown URI allows an attacker to shut down the remote media server. (Also, anonymous access can be achieved in applications that do not have a user login area).

Tautulli/Tautulli

A Python based monitoring and tracking tool for Plex Media Server.

GitHub

6.53K