Subsonic vulnerabilities

Products

• Subsonic 11

Newest

• subsonic Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF. CVE-2018-20228 8.0 HighDecember 19, 2018
• subsonic An XSS issue was discovered in Subsonic Media Server 6.1.1. The podcast subscription form is... CVE-2018-9282 6.1 MediumSeptember 21, 2018
• subsonic An issue was discovered in Subsonic 6.1.1. The music tags feature is affected by three stored... CVE-2018-14691 6.1 MediumSeptember 21, 2018
• subsonic An issue was discovered in Subsonic 6.1.1. The general settings are affected by two stored cross... CVE-2018-14690 6.1 MediumSeptember 21, 2018
• subsonic An issue was discovered in Subsonic 6.1.1. The transcoding settings are affected by five stored... CVE-2018-14689 6.1 MediumSeptember 21, 2018
• subsonic An issue was discovered in Subsonic 6.1.1. The radio settings are affected by three stored cross... CVE-2018-14688 6.1 MediumSeptember 21, 2018
• subsonic music streamer The Subsonic Music Streamer application 4.4 for Android has Improper Certificate Validation of... CVE-2018-15898 5.9 MediumSeptember 11, 2018
• subsonic Cross-site request forgery (CSRF) vulnerability in the Subscribe to Podcast feature in Subsonic 6... CVE-2017-9414 Public exploit EPSS 15.4% 8.8 HighFebruary 5, 2018
• subsonic Subsonic v6.1.3 has an insecure allow-access-from domain="*" Flash cross-domain policy that... CVE-2018-6014 6.5 MediumJanuary 23, 2018
• subsonic Multiple cross-site request forgery (CSRF) vulnerabilities in the Podcast feature in Subsonic 6.1... CVE-2017-9413 Public exploit 8.8 HighJuly 25, 2017
• subsonic Cross-site request forgery (CSRF) vulnerability in subsonic 6.1.1 allows remote attackers with... CVE-2017-9415 Public exploit 7.5 HighJuly 21, 2017
• subsonic XML external entity (XXE) vulnerability in the import playlist feature in Subsonic 6.1.1 might... CVE-2017-9355 Public exploit EPSS 26.9% 7.4 HighJune 7, 2017