Approved changes feed: RSS · Atom

cpe:2.3:a:plexripper_project:plexripper:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPlexripper Project (1b676d00-d117-55e0-8452-5e11211e40fa)
ProductPlexripper (50d7205a-134c-5c60-bf36-bb45a7ad706d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-49763 vulnerable 2026-06-08 06:50:14.631002 PlexRipper allows API leak due to open CORS policy
PlexRipper is a cross-platform media downloader for Plex. PlexRipper’s open CORS policy allows attackers to gain sensitive information from PlexRipper by getting the user to access the attacker’s domain. This allows an attacking website to access the /api/PlexAccount endpoint and steal the user’s Plex login. This vulnerability is fixed in 0.24.0.
Published: 2024-12-02T16:41:26.846Z
Updated: 2024-12-02T17:22:07.037Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.