Yüksek CVSS 7.8
CVE-2025-54305: Torrent Suite Software: sahtecilikle kimlik doğrulama atlatma
Açıklama (NVD)
An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. One of the middlewares included in this application, LocalhostAuthMiddleware, authenticates users as ionadmin if the REMOTE_ADDR property in request.META is set to 127.0.0.1, to 127.0.1.1, or to ::1. Any user with local access to the server may bypass authentication.
Özet bilgiler
- Ürün
- Thermofisher Torrent Suite Software
- CVSS v3.1
- 7.8
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,16 (yüzdelik 6)
- CWE
- CWE-290
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| thermofisher-torrent-suite-software | 5.18.1 | 5.18.1 | — |