CVE-2018-5702
Fixed in a distro release EPSS 12%
Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in conjunction with a DNS rebinding attack.
Products: transmissionbt transmission, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Arch Linux | transmission-cli | 2.92-8 |
| Debian 12 | transmission | 2.92-3 |
| Debian 13 | transmission | 2.92-3 |
| Debian 14 | transmission | 2.92-3 |
| Debian 7 | transmission | 2.52-3+nmu3 |
| Debian 8 | transmission | 2.84-0.2+deb8u1 |
| Debian 9 | transmission | 2.92-2+deb9u1 |
| Ubuntu 14.04 LTS | transmission | 2.82-1.1ubuntu3.2 |
| Ubuntu 16.04 LTS | transmission | 2.84-3ubuntu3.1 |
| openSUSE Tumbleweed | transmission | 3.00-2.8 |