CVE-2017-9031

Critical

Published: 17/05/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The WebUI component in Deluge before version 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template file.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to system files, posing a serious threat to the organization's data security.

Recommendation

It is recommended to upgrade Deluge to version 1.3.15 or later to mitigate this vulnerability.

Original NVD description (English source)

The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template file.