Lucene search
GoogleOSV:CVE-2017-7178HistoryMar 18, 2017 - 8:59 p.m.
CVE-2017-7178
2017-03-1820:59:00
Google
osv.dev
8
CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an arbitrary program from its init.py file and (2) causing the victim to download, install, and enable this plugin.
References
dev.deluge-torrent.org/wiki/ReleaseNotes/1.3.14
git.deluge-torrent.org/deluge/commit/?h=1.3-stable&id=318ab179865e0707d7945edc3a13a464a108d583
git.deluge-torrent.org/deluge/commit/?h=develop&id=11e8957deaf0c76fdfbac62d99c8b6c61cfdddf9
seclists.org/fulldisclosure/2017/Mar/6
www.debian.org/security/2017/dsa-3856
www.securityfocus.com/bid/97041
bugs.debian.org/857903
security.gentoo.org/glsa/201703-06
Related
gentoo
gentoo
Deluge: Remote execution of arbitrary code
2017-03-28 00:00:00
debian
debian
[SECURITY] [DLA 863-1] deluge security update
2017-03-19 20:33:09
[SECURITY] [DSA 3856-1] deluge security update
2017-05-18 20:35:00
debiancve
debiancve
CVE-2017-7178
2017-03-18 20:59:00
cve
cve
CVE-2017-7178
2017-03-18 20:59:00
cvelist
cvelist
CVE-2017-7178
2017-03-18 20:10:00
nessus
nessus
Debian DLA-863-1 : deluge security update
2017-03-20 00:00:00
GLSA-201703-06 : Deluge: Remote execution of arbitrary code
2017-03-28 00:00:00
Debian DSA-3856-1 : deluge - security update
2017-05-19 00:00:00
ubuntucve
ubuntucve
CVE-2017-7178
2017-03-18 00:00:00
osv
osv
deluge - security update
2017-03-19 00:00:00
deluge - security update
2017-05-18 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-863-1)
2018-01-11 00:00:00
Debian Security Advisory DSA 3856-1 (deluge - security update)
2017-05-18 00:00:00
openSUSE: Security Advisory for deluge (openSUSE-SU-2017:1497-1)
2017-06-07 00:00:00
prion
prion
Cross site request forgery (csrf)
2017-03-18 20:59:00
nvd
nvd
CVE-2017-7178
2017-03-18 20:59:00
suse
suse
Security update for deluge (important)
2017-06-07 00:09:00