xzw5 发表于 2023-3-1 12:44:32

【BLU】qB升级提醒

BLU


qBittorrent 4.5.0-4.5.1 WebUI security vulnerability

Recently there was a Path Traversal Vulnerability discovered in qBittorent. allowing an exploiter to view any files on your PC that user programs have access to.
You are affected IF you are using qBittorent on Windows with a publicly accessible WebUI (IE via port forward or reverse proxy)

ANY users that use qBittorent 4.5.x on Windows with the Web interface enabled should update immediately.

It should also be noted that qBitorrent's UPnP implementation can sometimes misreport the port that it announces to the tracker if UPnP is enabled, causing the affected user to not be connectable. As a result we continue to recommend that any users disable UPnP if they are currently using it.
页: [1]
查看完整版本: 【BLU】qB升级提醒