{"id":"CVE-2017-6504","details":"WebUI in qBittorrent before 3.3.11 did not set the X-Frame-Options header, which could potentially lead to clickjacking.","modified":"2026-07-08T16:53:15.696735Z","published":"2017-03-06T02:59:00.823Z","references":[{"type":"FIX","url":"https://github.com/qbittorrent/qBittorrent/commit/f5ad04766f4abaa78374ff03704316f8ce04627d"},{"type":"FIX","url":"https://www.qbittorrent.org/news.php"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/qbittorrent/qbittorrent","events":[{"introduced":"0"},{"last_affected":"4eac2cab318c544c7e3121b3997ab94aca567728"},{"fixed":"f5ad04766f4abaa78374ff03704316f8ce04627d"}],"database_specific":{"cpe":"cpe:2.3:a:qbittorrent:qbittorrent:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"3.3.10"}],"source":["CPE_RANGE","REFERENCES"]}}],"versions":["release-3.3.10","release-3.3.9","release-3.3.8","release-3.3.7","release-3.3.6","release-3.3.5","release-3.3.4","release-3.3.3","release-3.3.2","release-3.3.1","release-3.3.0","release-3.0.0","release-2.9.0"],"database_specific":{"vanir_signatures_modified":"2026-07-08T16:53:15Z","vanir_signatures":[{"source":"https://github.com/qbittorrent/qbittorrent/commit/f5ad04766f4abaa78374ff03704316f8ce04627d","target":{"file":"src/base/http/types.h"},"deprecated":false,"digest":{"line_hashes":["63528601637150015425696404348314044473","93672592725364108551219071659973863538","283067958532443803662862953009386888766","165626982830155749300251657218793077366"],"threshold":0.9},"id":"CVE-2017-6504-1a2f7f09","signature_type":"Line","signature_version":"v1"},{"id":"CVE-2017-6504-5e431c1c","signature_type":"Function","signature_version":"v1","source":"https://github.com/qbittorrent/qbittorrent/commit/f5ad04766f4abaa78374ff03704316f8ce04627d","target":{"file":"src/webui/abstractwebapplication.cpp","function":"AbstractWebApplication::processRequest"},"deprecated":false,"digest":{"function_hash":"194664120358939637373534022963674437370","length":468}},{"signature_version":"v1","source":"https://github.com/qbittorrent/qbittorrent/commit/f5ad04766f4abaa78374ff03704316f8ce04627d","target":{"file":"src/webui/abstractwebapplication.cpp"},"deprecated":false,"digest":{"line_hashes":["193451322726643751373163104625267832267","308342791731152669602398507322068816155","140190190001818533141518472870453987174","85601246813242774465113774726290531372"],"threshold":0.9},"id":"CVE-2017-6504-848cf254","signature_type":"Line"}],"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-6504.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}