CVE-2024-1651criticalCWE-502

CVE-2024-1651: critical vulnerability in Torrentpier

Torrentpier 2.4.1 - RCE

Published · Updated

Follow this CVE+ Monitor torrentpier+ Monitor torrentpier/torrentpier

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

60Vexday Risk Score

Keep watching. It has a public proof of concept.

ssvc Attendcvss 10epss 34%
from disclosure to weapon4 days
Published on NVDFeb 19
1st PoC+4d
Torrentpier version 2.4.1 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to insecure deserialization.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Torrentpier · Torrentpier
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.