CVE-2024-1651

Summary

Torrentpier version 2.4.1 allows executing arbitrary commands on the server.

This is possible because the application is vulnerable to insecure deserialization.

Affected Software

Weaknesses

• CWE-502: CWE-502 Deserialization of Untrusted Data

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/torrentpier/torrentpier
• https://fluidattacks.com/advisories/xavi/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: total

References

• https://github.com/torrentpier/torrentpier
• https://fluidattacks.com/advisories/xavi/

• ←Previous
• Next→