2 matches found
CVE-2017-9414
Cross-site request forgery CSRF vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of unspecified victims for requests that conduct cross-site scripting XSS attacks or possibly have unspecified other impact via the name paramet...
8.8CVSS9.1AI score0.15395EPSS
SaveExploits5References3
CVE-2017-9414: Cross-Site Request Forgery (CSRF)
Cross-site request forgery CSRF vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of unspecified victims for requests that conduct cross-site scripting XSS attacks or possibly have unspecified other impact via the name paramet...
8.8CVSS7.7AI score0.15395EPSS
SaveExploits5References2
20