1 matches found
CVE-2017-9414
Cross-site request forgery CSRF vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of unspecified victims for requests that conduct cross-site scripting XSS attacks or possibly have unspecified other impact via the name paramet...
8.8CVSS5.8AI score0.15395EPSS
SaveExploits5References3
20