Vulnerabilities

TI-2023-17073 CVE-2023-34237

Remote code execution via specially crafted script settings in SABnzbd

MEDIUM 46

SABnzbd is an open source automated Usenet download tool.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01731 Published 2023-06-07 Fixed in 4.0.2RC1 CWE-94

TI-2021-10201 CVE-2021-29488

Creation of files outside the Download Folder through malicious PAR2 files

LOW 26

SABnzbd is an open source binary newsreader.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00893 Published 2021-05-07 Fixed in 3.0.0, 3.2.1 CWE-23

TI-2020-10315 CVE-2020-13124

SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web…

MEDIUM 46

SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web configuration interface that permits an authenticated user to execute arbitrary Python commands on the underlying operating system.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04715 Published 2020-08-11 No fix listed CWE-78

Vulnerabilities

Filters

Remote code execution via specially crafted script settings in SABnzbd

Creation of files outside the Download Folder through malicious PAR2 files

SABnzbd 2.3.9 and 3.0.0Alpha2 has a command injection vulnerability in the web…