Поиск уязвимостей
Количество 5
Количество 5
CVE-2018-5702
Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.
CVE-2018-5702
Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.
CVE-2018-5702
Transmission through 2.92 relies on X-Transmission-Session-Id (which i ...
GHSA-6q4w-fhcp-mhw6
Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.
ALT-PU-2018-2017
ALT-PU-2018-2017: package `transmission` update to version 2.94-alt1.S1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2018-5702 Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack. | CVSS3: 8.8 | 12% Средний | почти 9 лет назад |
 | CVE-2018-5702 Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack. | CVSS3: 8.8 | 12% Средний | почти 9 лет назад |
| CVE-2018-5702 Transmission through 2.92 relies on X-Transmission-Session-Id (which i ... | CVSS3: 8.8 | 12% Средний | почти 9 лет назад |
| GHSA-6q4w-fhcp-mhw6 Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack. | CVSS3: 8.8 | 12% Средний | больше 4 лет назад |
| ALT-PU-2018-2017 ALT-PU-2018-2017: package `transmission` update to version 2.94-alt1.S1 | CVSS3: 8.8 | 12% Средний | больше 8 лет назад |
Уязвимостей на страницу