CVE-2017-9414

概要

参考情報

• hyp3rlinx.altervista.org/advisories/SUBSONIC-CSRF-PERSISTENT-XSS.txt · Exploit
• packetstormsecurity.com/files/142796/Subsonic-6.1.1-Persistent-XSS.html · Exploit
• exploit-db.com/exploits/42120 · Exploit

subsonic のその他の脆弱性

• CVE-2018-20228高 8.0Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF.
• CVE-2018-9282中 6.1An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is affected by a stored XSS vulnerability in the a…
• CVE-2018-14691中 6.1An issue was discovered in Subsonic 6.1.1. The music tags feature is affected by three stored cross-site scripting vulnerabilities in the c0…
• CVE-2018-14690中 6.1An issue was discovered in Subsonic 6.1.1. The general settings are affected by two stored cross-site scripting vulnerabilities in the title…
• CVE-2018-14689中 6.1An issue was discovered in Subsonic 6.1.1. The transcoding settings are affected by five stored cross-site scripting vulnerabilities in the …