Torrentpier version 2.4.1 allows executing arbitrary commands on the server.
This is possible because the application is vulnerable to insecure deserialization.
| Software | From | Fixed in |
|---|---|---|
torrentpier / torrentpier
|
- | 2.4.1.x |
torrentpier / torrentpier
|
2.4.1 | 2.4.1.x |