VULNERABILITY INTELLIGENCE

CVE-2008-5905

CVSS score4.3 MEDIUM
EPSS probability2.46%
CISA KEVNot currently listed
Published2009-01-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:P/A:N

Description

The web interface plugin in KTorrent before 3.1.4 allows remote attackers to bypass intended access restrictions and upload arbitrary torrent files, and trigger the start of downloads and seeding, via a crafted HTTP POST request.

Primary references