Read the docs

Subsonic

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Subsonic records in CISA KEV

No Subsonic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Subsonic 11 records MEDIUM Music Streamer 1 record LOW

Records

11 records in Subsonic · all components

TI-2017-06828 CVE-2017-9414 · GHSA-gp6h-mprg-xcxq

Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in…

Priority MEDIUM 54

Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6.1.1 allows remote attackers to hijack the authentication of unspecified victims for requests that conduct cross-site scrip…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.15395 Published 2018-02-05 No fix listed CWE-352
TI-2017-06827 CVE-2017-9413 · GHSA-pp3h-p5vc-xr8h

Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in…

Priority MEDIUM 42

Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1.1 allow remote attackers to hijack the authentication of users for requests that (1) subscribe to a podcast via the add pa…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01776 Published 2017-07-25 No fix listed CWE-352
TI-2017-06829 CVE-2017-9415 · GHSA-vvwq-frq9-95qp

Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers…

Priority LOW 38

Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target username to hijack the authentication of users for requests that change passwords via a crafted reque…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.02478 Published 2017-07-21 No fix listed CWE-352
Open these records in search →