CSRF Vulnerability in Tautulli Media Server by Tautulli
CVE-2019-19833

6.5MEDIUM

Key Information:

Vendor

Tautulli

Status
Tautulli
Vendor
CVE Published:
18 December 2019

What is CVE-2019-19833?

In Tautulli version 2.1.9, a Cross-Site Request Forgery vulnerability exists which allows attackers to exploit the /shutdown endpoint. This could lead to unauthorized shutdown of the remote media server. Additionally, applications without a user login mechanism may permit anonymous access, compounding the risk. It is crucial for users to update to the latest version to mitigate these security risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/Tautulli/Tautulli/compare/v2.1.9...v2....
x_refsource_MISC
http://packetstormsecurity.com/files/155710/Tautulli-2.1....
x_refsource_MISC
http://packetstormsecurity.com/files/155974/Tautulli-2.1....
x_refsource_MISC

EPSS Score

61% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.