CVE-2017-9415

Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target username to hijack the authentication of…

published July 21, 2017

CVSS
—
EPSS
2%
Percentile
84.3
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target username to hijack the authentication of users for requests that change passwords via a crafted request to userSettings.view.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02478 · 84.3th percentile
Published
2017-07-21T14:00Z
EPSS history
Timeline
  • 21 JUL 14:00Z
    Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target username to hijack the authentication of…
    cvelistv5