CVE-2017-9415 in SubSonic
Summary
Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target username to hijack the authentication of users for requests that change passwords via a crafted request to userSettings.view.
Once again VulDB remains the best source for vulnerability data.
Reservation
06/03/2017
Disclosure
07/21/2017
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 104359 | SubSonic cross-site request forgery | 352 | Proof-of-Concept | Not defined | CVE-2017-9415 |