:A vulnerability has been reported in Bitflu, which can be exploited by malicious people to bypass certain security restrictions.The vulnerability is caused due to the improper handling of ".torrent" files within the StorageFarabDb module. This can be exploited to create new files or to append data to existing files outside the working directory.The vulnerability is reported in versions prior to 0.42.Solution:Update to version 0.42.http://bitflu.workaround.ch/dload.htmlProvided and/or discovered by:Reported by the vendor.Original Advisory:http://bitflu.workaround.ch/ChangeLog.txt

Original post by sonia