CNNVD-202512-559 Information

CNNVD ID

CNNVD-202512-559

CVE-2025-54307

  • CNNVD Published: 2025-12-04

Description (Chinese)

Thermo Fisher Torrent Suite Django application是美国Thermo Fisher公司的一个核心软件组件。 Thermo Fisher Torrent Suite Django application 5.18.1版本存在安全漏洞,该漏洞源于文件上传功能路径清理不当,可能导致远程代码执行。

Description (English)

Thermo Fisher Torrent Suite Django application is a core software component of the United States company Hermo Fisher. There is a security loophole in version 5.18.1 of Thermo Fisher Torrent Suite Django application, which stems from the inappropriate process of clearing the file upload functionality, which may lead to remote code execution.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

Thermo Fisher

Published

2025-12-04

Last Modified

2026-02-24

References

https://assets.thermofisher.com/TFS-Assets/LSG/manuals/MAN0026163-Torrent-Suite-5.18-UG.pdf https://documents.thermofisher.com/TFS-Assets/CORP/Product-Guides/Ion_OneTouch_2_and_Torrent_Suite_Software.pdf https://www.thermofisher.com/us/en/home/life-science/sequencing/next-generation-sequencing/ion-torrent-next-generation-sequencing-workflow/ion-torrent-next-generation-sequencing-data-analysis-workflow/ion-torrent-suite-software.html

Share on: