high7.5Public exploit code
CVE-2017-9415
Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target username to hijack the authentication of…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Subsonic 6.1.1 - Cross-Site Request Forgery2017-06-05 · webapps · windows
Impact
Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target username to hijack the authentication of users for requests that change passwords via a crafted request to userSettings.view.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Subsonic | Subsonic | Version 6.1.1 |