A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/service/stop/. The manipulation leads to cross-site request fo…

Medium CVSS 4.3

CVECVE-2017-20120

First seen2026-08-20 20:15 UTC

Disclosed2022-06-29 17:15 UTC

Last updated2026-08-20 20:15 UTC

Channel statusauto

Summary

A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/service/stop/. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://vuldb.com/?id.96634 Permissions Required
https://www.exploit-db.com/exploits/41184/ Third Party Advisory
https://vuldb.com/?id.96634 Permissions Required
https://www.exploit-db.com/exploits/41184/ Third Party Advisory

Timeline

2026-08-20 nvd_ingest NVD