Skip to content
OpenAdvisories

Package · Debian

sabnzbdplus

4 known vulnerabilities.

2 results · Clear filters · Feed

  • High 7.0

    SABnzbd: Orphan-job path traversal permits arbitrary file deletion

    SABnzbd is an open source automated Usenet download tool. Prior to 5.1.0Beta3, orphan-job management in `sabnzbd/api.py` accepts the user-controlled `value` parameter without path confinement before `os.path.join()` with `download_dir`. An absolute path disca…

  • High 8.1

    Remote code execution via specially crafted script settings in SABnzbd

    SABnzbd is an open source automated Usenet download tool. A design flaw was discovered in SABnzbd that could allow remote code execution. Manipulating the Parameters setting in the Notification Script functionality allows code execution with the privileges of…