CVE-2017-9414

Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of…

published February 5, 2018

CVSS

—

EPSS

15%

Percentile

96.8

In the wild

Unconfirmed

What it is

Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of unspecified victims for requests that conduct cross-site scripting (XSS) attacks or possibly have unspecified other impact via the name parameter to playerSettings.view.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.15395 · 96.8th percentile
Published: 2018-02-05T16:00Z

EPSS history

Timeline

05 FEB 16:00Z
Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of…
cvelistv5