SUSE CVE-2018-5702

Transmission through 2.92 relies on X-Transmission-Session-Id which is not a forbidden header for Fetch for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS...

CVE-2018-5702: Undefined Security Weakness

Transmission through 2.92 relies on X-Transmission-Session-Id which is not a forbidden header for Fetch for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS...

PT-2018-17098

Name of the Vulnerable Software and Affected Versions: Transmission versions prior to 2.93 Description: The issue allows remote attackers to execute arbitrary RPC commands and write to arbitrary files via POST requests to "/transmission/rpc" in conjunction with a DNS rebinding attack. This is...