PlexTrac vulnerabilities
We track 9 vulnerabilities in PlexTrac products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on December 16, 2024.
Latest PlexTrac vulnerabilities
- 9.8 Critical severity
PlexTrac: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes. This issue affects PlexTrac: from 1.61.3 before 2.8.1.
- 7.5 High severity
PlexTrac: Deserialization of Untrusted Data
Deserialization of Untrusted Data vulnerability in PlexTrac (Runbooks modules) which allows Object Injection and arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1.
- 9.8 Critical severity
PlexTrac: External Control of File Name or Path
External Control of File Name or Path vulnerability in PlexTrac allows Local Code Inclusion through use of an undocumented API endpoint.This issue affects PlexTrac: from 1.61.3 before 2.8.1.
- 9.8 Critical severity
PlexTrac: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an N1QL Command ('N1QL Injection') vulnerability in PlexTrac allows N1QL Injection.This issue affects PlexTrac: from 1.61.3 before 2.8.1.
- 7.5 High severity
PlexTrac: Server-Side Request Forgery
Server-Side Request Forgery (SSRF) vulnerability in PlexTrac allowing requests to internal system resources.This issue affects PlexTrac: from 1.61.3 before 2.8.1.
- 8.9 High severity
PlexTrac: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1.
- 9.1 Critical severity
PlexTrac: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in PlexTrac allows arbitrary file writes.This issue affects PlexTrac: from 1.61.3 before 2.8.1.
- 7.5 High severity
Plextrac: Improper Restriction of Excessive Authentication Attempts
The PlexTrac platform prior to version 1.17.0 does not restrict excessive authentication attempts for accounts configured to use the PlexTrac authentication provider. An unauthenticated remote attacker could perform a bruteforce attack on the login page with n
- 8.8 High severity
Plextrac: Improper Restriction of Excessive Authentication Attempts
The PlexTrac platform prior to API version 1.17.0 does not restrict excessive MFA TOTP submission attempts. An unauthenticated remote attacker in possession of a valid username and password can bruteforce their way past MFA protections to login as the targeted