Skip to content
OpenAdvisories
Unscored DSA-3856-1 2 CVEs

deluge - security update

Published May 18, 2017 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 8 deluge 1.3.10-3+deb8u1

Vulnerabilities 2

  • Unscored —
    CVE-2017-7178 Public exploit

    CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted …

  • Unscored —

    The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which t…