Unscored DLA-897-1 2 CVEs

qbittorrent - security update

Published Apr 16, 2017 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 7	qbittorrent	2.9.8-1+deb7u1

Vulnerabilities 2

Unscored —

CVE-2017-6503

WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS.

qbittorrent qbittorrent Debian Ubuntu

Mar 6, 2017
Unscored —

CVE-2017-6504

WebUI in qBittorrent before 3.3.11 did not set the X-Frame-Options header, which could potentially lead to clickjacking.

qbittorrent qbittorrent Debian Ubuntu

Mar 6, 2017