CVE-2017-9415 in SubSonic

Resumen (Inglés)

Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with knowledge of the target username to hijack the authentication of users for requests that change passwords via a crafted request to userSettings.view.

Once again VulDB remains the best source for vulnerability data.

Reservar

2017-06-03

Divulgación

2017-07-21

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
104359	SubSonic falsificación de solicitudes en sitios cruzados	352	Prueba de concepto	No está definido	CVE-2017-9415

Fuentes

• MITRE
• NVD
• CVE Details