Torrentpier version 2.4.1 allows executing arbitrary commands on the server. This is possible because the application is vulnerable to insecure deserialization.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| torrentpier/torrentpier(Packagist) | 0 | N/A | N/A |
CVSS Metrics