Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88261
HistorySep 28, 2022 - 12:00 a.m.

Rdiffweb Email Denial of Service Vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
rdiffweb
denial of service
email
vulnerability
patrik dufresne

0.001 Low

EPSS

Percentile

38.1%

Rdiffweb is a web application by the American personal developer Patrik Dufresne. It allows quick access to your archives through an efficient web interface. a denial of service vulnerability exists in versions prior to Rdiffweb 2.4.8, which stems from not validating email length in rdiffweb-demo.ikus-soft.com/prefs/general. An attacker could exploit the vulnerability to launch a denial of service attack by entering a long string.

CPENameOperatorVersion
patrik dufresne rdiffweblt2.4.8

0.001 Low

EPSS

Percentile

38.1%