NetSight
high8.0

CVE-2018-20228

Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF.

Impact

Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF.

Affected products

VendorProductAffected versions
SubsonicSubsonic
Version 6.1.5

Weakness classification

References