Vulnerabilities > CVE-2024-1651

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
CWE-502
critical
NVD
Published: 2024-02-20
Updated: 2024-02-20

Summary

Torrentpier version 2.4.1 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to insecure deserialization.

Common Weakness Enumeration (CWE)

References