CVE-2009-1757
UnknownEPSS 0.83%
Last modified
CVE-2009-1757 is a vulnerability of currently unknown severity. Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.. EPSS estimates a 0.83% chance of exploitation in the next 30 days.
Description
Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Transmissionbt | Transmission | 1.50 |
| Transmissionbt | Transmission | 1.51 |
| Transmissionbt | Transmission | 1.52 |
| Transmissionbt | Transmission | 1.60 |
References
- http://www.transmissionbt.com/index.phpPatch, Vendor Advisory
- http://www.transmissionbt.com/index.phpPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-1757?
Cross-site request forgery (CSRF) vulnerability in Transmission 1.5 before 1.53 and 1.6 before 1.61 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
How severe is CVE-2009-1757?
Severity scoring for CVE-2009-1757 is pending analysis. The EPSS model estimates a 0.83% probability of exploitation in the next 30 days.
How do I fix CVE-2009-1757?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-1751SQL injection vulnerability in list_list.php in Realty Webwa…
- CVE-2009-1752exJune Office Message System 1 does not properly restrict ac…
- CVE-2009-1753Coccinelle 0.1.7 allows local users to overwrite arbitrary f…
- CVE-2009-1754The PackageManagerService class in services/java/com/android…
- CVE-2009-1755Off-by-one error in the packet_read_query_section function i…
- CVE-2009-1756SLiM Simple Login Manager 1.3.0 places the X authority magic…
- CVE-2009-1758The hypervisor_callback function in Xen, possibly before 3.4…
- CVE-2009-1759Stack-based buffer overflow in the btFiles::BuildFromMI func…
- CVE-2009-1760Directory traversal vulnerability in src/torrent_info.cpp in…
- CVE-2009-1761The message engine in CA ARCserve Backup r12.0 and r12.0 SP1…
- CVE-2009-1762Multiple cross-site scripting (XSS) vulnerabilities in the W…
- CVE-2009-1763Unspecified vulnerability in the Solaris Secure Digital slot…
Are you affected by CVE-2009-1757?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST