Subsonic 漏洞

时间轴

版本

6.1.16
5.4.12
6.1.32
12

修正

Official Fix0
Temporary Fix0
Workaround0
Unavailable2
Not Defined10

易受攻击性

High2
Functional0
Proof-of-Concept4
Unproven0
Not Defined6

访问向量

Not Defined0
Physical0
Local0
Adjacent0
Network12

身份验证

Not Defined0
High0
Low0
None12

用户交互

Not Defined0
Required6
None6

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤66
≤72
≤84
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤66
≤74
≤82
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤54
≤62
≤70
≤86
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤62
≤74
≤84
≤90
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

供应商

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

零日攻击

<1k4
<2k6
<5k2
<10k0
<25k0
<50k0
<100k0
≥100k0

本日攻击

<1k12
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

攻击市场容量

🔴 CTI 活动

Affected Versions (5): 1, 5.4.1, 6.1.1, 6.1.3, 6.1.5

已发布BaseTemp漏洞0day今天易修正CTICVE
2018-12-196.16.1SubSonic internetRadioSettings.view 跨网站请求伪造$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2018-20228
2018-09-215.25.2SubSonic tagService.setTags.dwr Stored 跨网站脚本$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2018-14691
2018-09-215.25.2SubSonic General Settings Stored 跨网站脚本$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2018-14690
2018-09-215.25.2SubSonic Transcoding Setting Stored 跨网站脚本$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2018-14689
2018-09-215.25.2SubSonic internetRadioSettings.view Stored 跨网站脚本$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2018-14688
2018-09-065.75.5daneren2005 DSub for Subsonic Server Certificate 弱身份验证$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2018-1000664
2018-02-056.55.9SubSonic Podcast 跨网站请求伪造$0-$5k$0-$5kProof-of-ConceptNot Defined0.00CVE-2017-9414
2018-01-236.96.9SubSonic Flash Cross-Domain Policy 信息公开$0-$5k$0-$5kNot DefinedNot Defined0.00CVE-2018-6014
2017-07-256.55.9Serve SubSonic Podcast 跨网站请求伪造$0-$5k$0-$5kProof-of-ConceptNot Defined0.00CVE-2017-9413
2017-07-215.95.3SubSonic 跨网站请求伪造$0-$5k$0-$5kProof-of-ConceptNot Defined0.00CVE-2017-9415

2 更多条目未显示

🔒 Login Required

You need to signup and login to see more of the remaining 2 results.

◂ 上一步一览下一步 ▸

Do you know our Splunk app?

Download it now for free!