CVE-2024-1651 — Torrentpier 2.4.1 - RCE

CVE-2024-1651

Torrentpier 2.4.1 - RCE PUBLISHED

Description (CNA)

Torrentpier version 2.4.1 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to insecure deserialization.

Affected (CNA)

Vendor / product	Versions
Torrentpier / Torrentpier	affected 2.4.1

CWE

CWE-502

References

https://github.com/torrentpier/torrentpier
https://fluidattacks.com/advisories/xavi/

ADP enrichment

CVE

No English description supplied.

https://github.com/torrentpier/torrentpier
https://fluidattacks.com/advisories/xavi/

CISA-ADP

No English description supplied.

No references supplied.