Lucene search

K
cvelist@huntrdevCVELIST:CVE-2022-3274
HistorySep 22, 2022 - 6:15 p.m.

CVE-2022-3274 Cross-Site Request Forgery (CSRF) on user's settings in GitHub repository ikus060/rdiffweb prior to 2.4.6. in ikus060/rdiffweb

2022-09-2218:15:11
CWE-352
@huntrdev
www.cve.org
6
github
repository
csrf
vulnerability
ikus060/rdiffweb

CVSS3

7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

21.4%

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.

CNA Affected

[
  {
    "product": "ikus060/rdiffweb",
    "vendor": "ikus060",
    "versions": [
      {
        "lessThan": "2.4.7",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H

AI Score

4.8

Confidence

High

EPSS

0.001

Percentile

21.4%