A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/service/stop/. The manipulation leads to cross-site request fo…

中危 CVSS 4.3

CVECVE-2017-20120

首次发现2026-08-20 20:15 UTC

披露时间2022-06-29 17:15 UTC

最后更新2026-08-20 20:15 UTC

通道状态auto

摘要

A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/service/stop/. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

深度研判

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。

受影响产品

数据来源

NVD DATABASE

原始链接

https://vuldb.com/?id.96634 Permissions Required
https://www.exploit-db.com/exploits/41184/ Third Party Advisory
https://vuldb.com/?id.96634 Permissions Required
https://www.exploit-db.com/exploits/41184/ Third Party Advisory

时间线

2026-08-20 nvd_ingest NVD