writeups.xyz / Disclose any main and 3rd party contributors email address and movie local path thru XML file in Plex TV - plex.tv (Write Up)

Submitter : c2a

Date: 24 July 2019

Bounty : undisclosed

Vulnerabilities :

• Information Disclosure
• Internal Path Disclosure

Programs :

• Plex

Authors :

• Evan Ricafort (@Evanricafort)

Link :
https://blog.evanricafort.com/2019/07/business-logic-plex-tv.html