CVE-2008-6587

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-04-03 · updated 2026-06-16
Weakness: CWE-352

Description

Cross-site request forgery (CSRF) vulnerability in index.tmpl in Vuze (formerly Azureus HTML WebUI), probably 0.7.6, allows remote attackers to hijack the authentication of users for requests that force the download of arbitrary torrent files via the upurl parameter.

Affected products

Vuze: 0.7.6

References

http://www.securityfocus.com/archive/1/491066/100/0/threaded
http://www.securityfocus.com/bid/28848
https://exchange.xforce.ibmcloud.com/vulnerabilities/41926
http://www.securityfocus.com/archive/1/491066/100/0/threaded
http://www.securityfocus.com/bid/28848
https://exchange.xforce.ibmcloud.com/vulnerabilities/41926

Get alerted when CVE-2008-6587 or the next vulnerability affects your stack