CVE-2021-3427 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2021-3427 Interim 1 7 2025-02-17T01:01:45Z current 2022-09-07T23:47:10Z 2025-02-17T01:01:45Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2021-3427 The Deluge Web-UI is vulnerable to XSS through a crafted torrent file. The the data from torrent files is not properly sanitised as it's interpreted directly as HTML. Someone who supplies the user with a malicious torrent file can execute arbitrary Javascript code in the context of the user's browser session. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Package Hub 15 SP3 SUSE Package Hub 15 SP4 openSUSE Leap 15.3 openSUSE Leap 15.4 openSUSE Tumbleweed deluge-2.1.1-3.1 deluge-2.1.1-bp153.2.3.1 deluge-2.1.1-bp154.2.3.1 deluge-lang-2.1.1-3.1 deluge-lang-2.1.1-bp153.2.3.1 deluge-lang-2.1.1-bp154.2.3.1 deluge-2.1.1-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 deluge-lang-2.1.1-bp153.2.3.1 as a component of SUSE Package Hub 15 SP3 deluge-2.1.1-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 deluge-lang-2.1.1-bp154.2.3.1 as a component of SUSE Package Hub 15 SP4 deluge-2.1.1-bp153.2.3.1 as a component of openSUSE Leap 15.3 deluge-lang-2.1.1-bp153.2.3.1 as a component of openSUSE Leap 15.3 deluge-2.1.1-bp154.2.3.1 as a component of openSUSE Leap 15.4 deluge-lang-2.1.1-bp154.2.3.1 as a component of openSUSE Leap 15.4 deluge-2.1.1-3.1 as a component of openSUSE Tumbleweed deluge-lang-2.1.1-3.1 as a component of openSUSE Tumbleweed The Deluge Web-UI is vulnerable to XSS through a crafted torrent file. The the data from torrent files is not properly sanitised as it's interpreted directly as HTML. Someone who supplies the user with a malicious torrent file can execute arbitrary Javascript code in the context of the user's browser session. CVE-2021-3427 SUSE Package Hub 15 SP3:deluge-2.1.1-bp153.2.3.1 SUSE Package Hub 15 SP3:deluge-lang-2.1.1-bp153.2.3.1 SUSE Package Hub 15 SP4:deluge-2.1.1-bp154.2.3.1 SUSE Package Hub 15 SP4:deluge-lang-2.1.1-bp154.2.3.1 openSUSE Leap 15.3:deluge-2.1.1-bp153.2.3.1 openSUSE Leap 15.3:deluge-lang-2.1.1-bp153.2.3.1 openSUSE Leap 15.4:deluge-2.1.1-bp154.2.3.1 openSUSE Leap 15.4:deluge-lang-2.1.1-bp154.2.3.1 openSUSE Tumbleweed:deluge-2.1.1-3.1 openSUSE Tumbleweed:deluge-lang-2.1.1-3.1 moderate 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N