Torrent Suite Software vulnerabilities
4 known vulnerabilities in Torrent Suite Software from Thermofisher. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
Torrent Suite Software: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. The /configure/plugins/plugin/upload/zip/ and /configure/newupdates/offline/bundle/upload/ endpoints allow low-privilege users to upload ZIP files to the server. The plupload
- 7.2 High severity
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1.
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. A remote code execution vulnerability exists in the network configuration functionality, stemming from insufficient input validation when processing network configuration par
- 7.8 High severity
Torrent Suite Software: Authentication Bypass by Spoofing
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. One of the middlewares included in this application, LocalhostAuthMiddleware, authenticates users as ionadmin if the REMOTE_ADDR property in request.META is set to 127.0.0.1,
- 9.8 Critical severity
Torrent Suite Software: Use of Default Credentials
The Thermo Fisher Torrent Suite Django application 5.18.1 has weak default credentials, which are stored as fixtures for the Django ORM API. The ionadmin user account can be used to authenticate to default deployments with the password ionadmin. The user guide