[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#984604: buster-pu: package sabnzbdplus/2.3.6+dfsg-1



Control: tags -1 + confirmed

On Fri, 2021-03-05 at 20:00 +0100, Jeroen Ploemen wrote:
> The sabnzbdplus package in buster is affected by a security issue
> (CVE-2020-13124), permitting code execution from the program's web
> interface through crafted settings. By default, the web interface is
> only accessible from localhost, with no authentication required.
> 

Please go ahead.

Regards,

Adam


Reply to: