{"uuid": "b56f90a0-fa9a-452d-b0ff-6e46bb579125", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2020-26948", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/emby_ssrf_scanner.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Btnz\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"Generates a `GET` request to the provided web servers and executes an SSRF against\\n                        the targeted EMBY server. Returns the server header, HTML title attribute and\\n                        location header (if set). This is useful for rapidly identifying web applications\\n                        on the internal network using the Emby SSRF vulnerability (CVE-2020-26948).\", \"disclosure_date\": null, \"fullname\": \"auxiliary/scanner/http/emby_ssrf_scanner\", \"is_install_path\": true, \"mod_time\": \"2024-07-24 16:42:43 +0000\", \"name\": \"Emby SSRF HTTP Scanner\", \"needs_cleanup\": false, \"notes\": {\"RelatedModules\": [\"auxiliary/scanner/http/emby_version_ssrf\"], \"Reliability\": [], \"SideEffects\": [], \"Stability\": []}, \"path\": \"/modules/auxiliary/scanner/http/emby_ssrf_scanner.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"scanner/http/emby_ssrf_scanner\", \"references\": [\"CVE-2020-26948\", \"URL-https://github.com/btnz-k/emby_ssrf\"], \"rport\": null, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:31.353248Z"}