CVE-2017-20120

Name of the Vulnerable Software and Affected Versions TrueConf Server version 4.3.7

Description The issue is related to a cross-site request forgery (CSRF) attack, which can be initiated remotely. It affects the /admin/service/stop/ component of the TrueConf Server software. The exploitation of this issue may allow an attacker to perform a CSRF attack.

Recommendations For TrueConf Server version 4.3.7, consider disabling access to the /admin/service/stop/ endpoint as a temporary workaround until a patch is available. Restrict access to this component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.