Security Advisory

CVE-2017-7178

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2017-03-18 20:10:00
Last updated 2024-08-05 15:56:36
Assigner mitre
State PUBLISHED

Description

CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an arbitrary program from its __init__.py file and (2) causing the victim to download, install, and enable this plugin.