CVE-2022-3233

🗓️ 21 Sep 2022 19:40:08Reported by @huntrdevType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 105 Views

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6

Reporter	Title	Published	Views	Family All 17
Huntr	CSRF leads to disabling notifications in users profile	16 Sep 202214:49	–	huntr
Circl	CVE-2022-3233	22 Sep 202200:46	–	circl
CNNVD	Rdiffweb 跨站请求伪造漏洞	21 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-3233 Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb	21 Sep 202219:40	–	cvelist
EUVD	EUVD-2022-0235	3 Oct 202520:07	–	euvd
Github Security Blog	rdiffweb CSRF could lead to disabling notifications in user profile	22 Sep 202200:00	–	github
Mend	CVE-2022-3233	21 Sep 202219:40	–	mend
NVD	CVE-2022-3233	21 Sep 202220:15	–	nvd
OSV	GHSA-9VXF-MCM6-5M42 rdiffweb CSRF could lead to disabling notifications in user profile	22 Sep 202200:00	–	osv
OSV	PYSEC-2022-285	21 Sep 202220:15	–	osv

NVD

Vulners

Node

ikus-soft rdiffwebRange<2.4.6

ikus-soft rdiffwebMatch2.4.6-

[
  {
    "product": "ikus060/rdiffweb",
    "vendor": "ikus060",
    "versions": [
      {
        "lessThan": "2.4.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]