Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-88264
HistorySep 28, 2022 - 12:00 a.m.

Rdiffweb Virtual Tampering Vulnerability

2022-09-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
11
rdiffweb
web application
virtual tampering
vulnerability
malicious data
misleading information
attacker
exploit

EPSS

0.001

Percentile

21.4%

Rdiffweb is a web application from the American personal developer Patrik Dufresne. It provides quick access to your archives through an efficient web interface.A virtual tampering vulnerability exists in versions prior to Rdiffweb 2.4.8, which can be exploited by attackers to inject malicious data into pages of the web application in order to provide misleading information to users of the application.

EPSS

0.001

Percentile

21.4%