Описание
The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template file.
Ссылки
- Release NotesVendor Advisory
- PatchVendor Advisory
- Mailing ListPatchThird Party Advisory
- Release NotesVendor Advisory
- PatchVendor Advisory
- Mailing ListPatchThird Party Advisory
Уязвимые конфигурации
EPSS
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
Связанные уязвимости
The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template file.
The WebUI component in Deluge before 1.3.15 contains a directory trave ...
The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template file.
ALT-PU-2017-2355: package `deluge` update to version 1.3.15-alt1
EPSS
9.8 Critical
CVSS3
7.5 High
CVSS2