PT-2018-8507 · Subsonic · Subsonic

Hyp3Rlinx + 1 · Publicado 2018-02-05 · Atualizado 2018-02-23 · CVE-2017-9414

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Subsonic version 6.1.1

Description A cross-site request forgery (CSRF) issue exists in the Subscribe to Podcast feature, allowing remote attackers to hijack the authentication of victims for requests that conduct cross-site scripting (XSS) attacks or possibly have other impact via the name parameter to playerSettings.view.

Recommendations For Subsonic version 6.1.1, as a temporary workaround, consider disabling the Subscribe to Podcast feature until a patch is available. Restrict access to the playerSettings.view endpoint to minimize the risk of exploitation. Avoid using the name parameter in the affected endpoint until the issue is resolved.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2017-9414

Produtos afetados

Subsonic

Referências · 5

• 🔥 http://packetstormsecurity.com/files/142796/Subsonic-6.1.1-Persistent-XSS.html · Exploit
• 🔥 https://exploit-db.com/exploits/42120 · Exploit
• 🔥 http://hyp3rlinx.altervista.org/advisories/SUBSONIC-CSRF-PERSISTENT-XSS.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-9414 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-9414 · Aviso do Fabricante