8 matches found
SUSE CVE-2017-9031
The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template file...
Mageia: Security Advisory (MGASA-2017-0449)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Updated deluge packages fix security vulnerability
The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template fileCVE-2017-9031. Updated deluge package adds systemd services required to autostart deluge daemon and web service...
openSUSE Security Update : deluge (openSUSE-2017-656)
This update for deluge fixes two security issues : - CVE-2017-9031: A remote attacker may have used a directory traversal vulnerability in the web interface bsc1039815 - CVE-2017-7178: A remote attacher could have exploited a CSRF vulnerability to trick a logged-in user to perform actions in the...
Debian DSA-3856-1 : deluge - security update
Two vulnerabilities have been discovered in the web interface of the Deluge BitTorrent client directory traversal and cross-site request forgery. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisor...
[SECURITY] [DSA 3856-1] deluge security update
------------------------------------------------------------------------- Debian Security Advisory DSA-3856-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff May 18, 2017 https://www.debian.org/security/faq -...
CVE-2017-9031
CVE-2017-9031 affects the WebUI component of Deluge prior to version 1.3.15 . The vulnerability is a directory traversal flaw caused by a request where the render file name is not linked to any template file, enabling potential exposure of files via the web interface. Multiple connected sources c...
CVE-2017-9031
The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template file...