CVE-2024-1651
CVE-2024-1651 · Torrentpier 2.4.1 - RCE
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Torrentpier version 2.4.1 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to insecure deserialization.
CVSS 10.0 · Critical · EPSS 34.2%
- Published
- Updated
Stack: php
Affected products and versions
torrentpier
- Versions
- 2.4.1: Affected
No fix published
torrentpier/torrentpier Packagist
- Versions
- 2.3.0.4-beta
- 2.3.0.4-beta2
- v2.2.0
- v2.2.1
- v2.2.2
- v2.2.3
- v2.3.0
- v2.3.0.1
- v2.3.0.2
- v2.3.0.3
- v2.3.1
- v2.3.1-rc1
- v2.4.0
- v2.4.0-alpha1
- v2.4.0-alpha2
- v2.4.0-alpha3
- v2.4.0-alpha4
- v2.4.0-beta1
- v2.4.0-beta2
- v2.4.0-beta3
- v2.4.0-beta4
- v2.4.0-rc1
- v2.4.0-rc2
- v2.4.1
- Affected ranges
- ECOSYSTEM: ≤ 2.4.1
No fix published