Vendor
Zurich Instruments
2 known vulnerabilities.
Products
2 results · Clear filters · Feed
-
High 7.8
Arbitrary Code Execution via Unsafe Deserialization in LabOne Q
The LabOne Q serialization framework uses a class-loading mechanism (import_cls) to dynamically import and instantiate Python classes during deserialization. Prior to the fix, this mechanism accepted arbitrary fully-qualified class names from the serialized d…
-
High 7.5
Path Traversal Vulnerability in LabOne User Interface
The LabOne Web Server, backing the LabOne User Interface, contains insufficient input validation in its file access functionality. An unauthenticated attacker could exploit this vulnerability to read arbitrary files on the host system that are accessible to t…