Description
Sickbeard alpha contains a cross-site request forgery vulnerability that allows attackers to disable authentication by submitting crafted configuration parameters. Attackers can trick users into submitting a malicious form that clears web username and password, effectively removing authentication protection.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| midgetspy | Sickbeard | 0.1 | — |
References
- ExploitDB-48712 exploit
- Archived Sickbeard Official Homepage product
- Sickbeard GitHub Repository product
- VulnCheck Advisory: Sickbeard 0.1 - Cross-Site Request Forgery third-party-advisory