CVE-2017-9355

XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery…

published June 7, 2017

CVSS
—
EPSS
27%
Percentile
98.0
In the wild
Unconfirmed
What it is

XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted XSPF playlist file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.26906 · 98.0th percentile
Published
2017-06-07T19:00Z
EPSS history
Timeline
  • 07 JUN 19:00Z
    XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might allow remote attackers to conduct server-side request forgery…
    cvelistv5