CVE-2017-9415

Cross-site request forgery CSRF vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target username to hijack the authentication of users for requests that change passwords via a crafted request to userSettings.view...

PT-2017-18904

Name of the Vulnerable Software and Affected Versions Subsonic version 6.1.1 Description A cross-site request forgery CSRF issue allows remote attackers with knowledge of the target username to hijack user authentication for requests that change passwords via a crafted request to...

CVE-2017-9415: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target username to hijack the authentication of users for requests that change passwords via a crafted request to userSettings.view...