Описание
CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an arbitrary program from its init.py file and (2) causing the victim to download, install, and enable this plugin.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 1.3.15-2 |
| cosmic | not-affected | 1.3.15-2 |
| devel | not-affected | 1.3.15-2 |
| disco | not-affected | 1.3.15-2 |
| eoan | not-affected | 1.3.15-2 |
| esm-apps-legacy/xenial | released | 1.3.12-1ubuntu1+esm1 |
| esm-apps/bionic | not-affected | 1.3.15-2 |
| esm-apps/focal | not-affected | 1.3.15-2 |
| esm-apps/jammy | not-affected | 1.3.15-2 |
Показывать по
Ссылки на источники
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an arbitrary program from its __init__.py file and (2) causing the victim to download, install, and enable this plugin.
CSRF was discovered in the web UI in Deluge before 1.3.14. The exploit ...
CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an arbitrary program from its __init__.py file and (2) causing the victim to download, install, and enable this plugin.
ALT-PU-2017-2355: package `deluge` update to version 1.3.15-alt1
EPSS
6.8 Medium
CVSS2
8.8 High
CVSS3