{"id":"CVE-2025-46564","aliases":["MGASA-2025-0174"],"status":"published","title":"Updated deluge packages fix security vulnerabilities \u0026 bug","description":"Limited unauthenticated file read in /flag. (CVE-2025-46561)\nNew version check over unencrypted channel. (CVE-2025-46562)\nSSRF with information leak and limited unauthenticated file write.\n(CVE-2025-46563)\nUnauthenticated file read in /js may lead to RCE. (CVE-2025-46564)\nMageia internal bug: deluge-daemon.service was not working; the update\nfixes this issue.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2025-05-31T16:20:42Z","modified":"2026-04-16T04:43:16Z","affected":[{"source":"osv","ecosystem":"Mageia:9","package":"deluge","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-1.5.mga9"}]}],"bundled":4}],"references":[{"url":"https://advisories.mageia.org/MGASA-2025-0174.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34274","tags":["report"]}],"sources":{"osv":[{"id":"MGASA-2025-0174","title":"Updated deluge packages fix security vulnerabilities \u0026 bug","description":"Limited unauthenticated file read in /flag. (CVE-2025-46561)\nNew version check over unencrypted channel. (CVE-2025-46562)\nSSRF with information leak and limited unauthenticated file write.\n(CVE-2025-46563)\nUnauthenticated file read in /js may lead to RCE. (CVE-2025-46564)\nMageia internal bug: deluge-daemon.service was not working; the update\nfixes this issue.\n","status":"published","published":"2025-05-31T16:20:42Z","modified":"2026-04-16T04:43:16.326373733Z","updated_at":"2026-11-02T15:49:43.178336Z"}]}}