CVE-2014-6027

MEDIO 6.1CVE-2014-6027 · Published 16/01/2018 · updated 17/06/2026

En resumen

CVE-2014-6027 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a torrentflux (torrentflux project).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.2%, mayor que el 68.2% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
torrentflux torrentflux_project	`= 2.4`	No fix yet

Description

Multiple cross-site scripting (XSS) vulnerabilities in TorrentFlux 2.4 allow (1) remote attackers to inject arbitrary web script or HTML by leveraging failure to encode file contents when downloading a torrent file or (2) remote authenticated users to inject arbitrary web script or HTML via vectors involving a link to torrent details.

References

openwall.com/lists/oss-security/2014/09/02/3 · Issue Tracking
securitytracker.com/id/1030791 · Third Party Advisory
bugs.debian.org/cgi-bin/bugreport.cgi · Exploit

Más vulnerabilidades de torrentflux

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

torrentflux

torrentflux_project

= 2.4

No fix yet

Description

Más vulnerabilidades de torrentflux

Ver todo →