CVE-2024-1651 in Torrentpier

Riassunto

di MITRE • 20/02/2024

Torrentpier version 2.4.1 allows executing arbitrary commands on the server.

This is possible because the application is vulnerable to insecure deserialization.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: Fluid Attacks
• Prenotare: 19/02/2024
• Divulgazione: 20/02/2024
• Moderazione: accettato
• Voce: VDB-254143
• CPE: pronto
• CWE: CWE-502 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.33997
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-1651
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-1651
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-1651/