CVE-2017-7178

CSRF was discovered in the web UI in Deluge before 1.3.14

published March 18, 2017

CVSS
—
EPSS
4%
Percentile
90.5
In the wild
Unconfirmed
What it is

CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an arbitrary program from its __init__.py file and (2) causing the victim to download, install, and enable this plugin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04018 · 90.5th percentile
Published
2017-03-18T20:10Z
EPSS history
Timeline
  • 18 MAR 20:10Z
    CSRF was discovered in the web UI in Deluge before 1.3.14
    cvelistv5