Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF.
subsonic subsonic 6.1.5