critical10.0
CVE-2024-1651
Deserialization of Untrusted Data in Torrentpier
Impact
Torrentpier version 2.4.1 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to insecure deserialization.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | torrentpier/torrentpier | <= 2.4.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Torrentpier | Torrentpier | Version 2.4.1 |