Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF.

Published Dec 19, 2018 · Updated Aug 5, 2024 · Assigned by mitre