medium6.1
CVE-2017-6503
WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS.
Impact
WebUI in qBittorrent before 3.3.11 did not escape many values, which could potentially lead to XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qbittorrent | Qbittorrent | through 3.3.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/96758
- https://github.com/qbittorrent/qBittorrent/commit/6ca3e4f094da0a0017cb2d483ec1db6176bb0b16
- https://www.qbittorrent.org/news.php
- http://www.securityfocus.com/bid/96758
- https://github.com/qbittorrent/qBittorrent/commit/6ca3e4f094da0a0017cb2d483ec1db6176bb0b16
- https://www.qbittorrent.org/news.php