Skip to content
OpenAdvisories
Unscored USN-8979-1 2 CVEs

deluge vulnerabilities

Published Nov 3, 2026 · Updated Nov 4, 2026

Ecosystem: Ubuntu

Summary

It was discovered that the web UI in Deluge did not protect against cross-
site request forgery. A remote attacker could possibly use this issue to
trick a user into installing a malicious plugin, resulting in the execution
of arbitrary code. (CVE-2017-7178)

It was discovered that the web UI in Deluge incorrectly handled certain
requests. A remote attacker could possibly use this issue to read arbitrary
files. (CVE-2017-9031)

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS deluge 1.3.12-1ubuntu1+esm1

Vulnerabilities 2

  • Unscored —
    CVE-2017-7178 Public exploit

    CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted …

    deluge deluge Debian Ubuntu
  • Unscored —
    CVE-2017-9031

    The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which t…

    deluge deluge Debian Ubuntu

References

  • report
    https://ubuntu.com/security/CVE-2017-7178
  • report
    https://ubuntu.com/security/CVE-2017-9031