TEMP-1151741-96F125

NameTEMP-1151741-96F125
Descriptionqbittorrent: unsafe RSS and search-result URLs can execute JavaScript in WebUI
SourceAutomatically generated temporary name. Not for external reference.
Debian Bugs1151741

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
qbittorrent (PTS)bookworm4.5.2-3+deb12u1vulnerable
trixie5.1.0-2vulnerable
forky, sid5.3.0-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
qbittorrentsource(unstable)5.3.0-11151741

Notes

[trixie] - qbittorrent <no-dsa> (Minor issue)
https://github.com/qbittorrent/qBittorrent/pull/24790
https://github.com/qbittorrent/qBittorrent/commit/b1aa71d8445daeb49ec89afb8efc0c657d4d9663 (release-5.3.0beta1)

Search for package or bug name: Reporting problems