CVE-2018-14691

概要

参考情報

• bishopfox.com/news/2018/09/subsonic-6-1-1-multiple-vulnerabilities · Exploit

subsonic のその他の脆弱性

• CVE-2018-20228高 8.0Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF.
• CVE-2018-9282中 6.1An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is affected by a stored XSS vulnerability in the a…
• CVE-2018-14690中 6.1An issue was discovered in Subsonic 6.1.1. The general settings are affected by two stored cross-site scripting vulnerabilities in the title…
• CVE-2018-14689中 6.1An issue was discovered in Subsonic 6.1.1. The transcoding settings are affected by five stored cross-site scripting vulnerabilities in the …
• CVE-2018-14688中 6.1An issue was discovered in Subsonic 6.1.1. The radio settings are affected by three stored cross-site scripting vulnerabilities in the name[…