CVE-2008-6586

Cross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent) WebUI 0.315 allows remote attackers to (1) hijack the authentication of…

published April 3, 2009

CVSS
—
EPSS
3%
Percentile
85.9
In the wild
Unconfirmed
What it is

Cross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent) WebUI 0.315 allows remote attackers to (1) hijack the authentication of users for requests that force the download of arbitrary torrent files via the add-url action and (2) hijack the authentication of administrators for requests that modify the administrator account via the setsetting action.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02722 · 85.9th percentile
Published
2009-04-03T18:00Z
EPSS history
Timeline
  • 03 APR 18:00Z
    Cross-site request forgery (CSRF) vulnerability in gui/index.php in µTorrent (uTorrent) WebUI 0.315 allows remote attackers to (1) hijack the authentication of…
    cvelistv5