Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2017-7178
8.8
HIGHCVSS v3
Published
March 18, 2017
CVSS v2
6.8 MEDIUM
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
CSRF was discovered in the web UI in Deluge before 1.3.14. The exploitation methodology involves (1) hosting a crafted plugin that executes an arbitrary program from its __init__.py file and (2) causing the victim to download, install, and enable this plugin.
Deluge
Chocolatey## deluge
Deluge is a [full-featured](https://dev.deluge-torrent.org/wiki/About#Whataboutfeatures) BitTorrent client for Linux, OS X, Unix and Windows.
Deluge uses [libtorrent](https://www.libtorrent.org/) in its backend and features multiple user-interfaces including: GTK+, web and console.
It has been designed using the client server model with a daemon process that handles all the bittorrent activity.
The Deluge daemon is able to run on headless machines with the user-interfaces being able to connect remotely from any platform.
Deluge features a rich [plugin collection](https://dev.deluge-torrent.org/wiki/Plugins); in fact, most of Deluge's functionality is available in the form of plugins.
Deluge was created with the intention of being lightweight and unobtrusive.
It is our belief that downloading shouldn't be the primary task on your computer and therefore shouldn't monopolize system resources.
Deluge is not designed for any one desktop environment and will work just fine in GNOME, KDE, XFCE and others. We do our best to adhere to the [freedesktop](https://www.freedesktop.org/wiki/) standards.
Deluge is Free Software and is licensed under the GNU General Public License.
### Package-specific issue
If this package isn't up-to-date for some days, [Create an issue](https://github.com/tunisiano187/Chocolatey-packages/issues/new/choose)
Support the package maintainer and [](https://www.patreon.com/tunisiano)
Chocolatey## deluge
Deluge is a [full-featured](https://dev.deluge-torrent.org/wiki/About#Whataboutfeatures) BitTorrent client for Linux, OS X, Unix and Windows.
Deluge uses [libtorrent](https://www.libtorrent.org/) in its backend and features multiple user-interfaces including: GTK+, web and console.
It has been designed using the client server model with a daemon process that handles all the bittorrent activity.
The Deluge daemon is able to run on headless machines with the user-interfaces being able to connect remotely from any platform.
Deluge features a rich [plugin collection](https://dev.deluge-torrent.org/wiki/Plugins); in fact, most of Deluge's functionality is available in the form of plugins.
Deluge was created with the intention of being lightweight and unobtrusive.
It is our belief that downloading shouldn't be the primary task on your computer and therefore shouldn't monopolize system resources.
Deluge is not designed for any one desktop environment and will work just fine in GNOME, KDE, XFCE and others. We do our best to adhere to the [freedesktop](https://www.freedesktop.org/wiki/) standards.
Deluge is Free Software and is licensed under the GNU General Public License.
### Package-specific issue
If this package isn't up-to-date for some days, [Create an issue](https://github.com/tunisiano187/Chocolatey-packages/issues/new/choose)
Support the package maintainer and [](https://www.patreon.com/tunisiano)< 1.3.14NVD
NPM
RubyGems
GitHub