Upstream information
Description
qBittorrent before 5.1.2 does not prevent access to a local file that is referenced in a link URL. This affects rsswidget.cpp and searchjobwidget.cpp.SUSE information
Overall state of this security issue: Does not affect SUSE products
This issue is currently rated as having moderate severity.
| CVSS detail | CNA (MITRE) | National Vulnerability Database | 
|---|---|---|
| Base Score | 4 | 5.3 | 
| Vector | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | 
| Attack Vector | Network | Network | 
| Attack Complexity | High | Low | 
| Privileges Required | None | None | 
| User Interaction | None | None | 
| Scope | Changed | Unchanged | 
| Confidentiality Impact | Low | Low | 
| Integrity Impact | None | None | 
| Availability Impact | None | None | 
| CVSSv3 Version | 3.1 | 3.1 | 
SUSE Timeline for this CVE
CVE page created: Sat Jul 19 00:00:15 2025CVE page last modified: Fri Oct 10 01:31:43 2025
