654 matches found
CVE-2022-3362 Insufficient Session Expiration in ikus060/rdiffweb
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0...
CVE-2022-3362 Insufficient Session Expiration in ikus060/rdiffweb
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0...
Rdiffweb subject to Business Logic Errors
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7...
GHSA-JW36-MRVG-J5FX Rdiffweb subject to Business Logic Errors
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7...
Business Logic Errors
rdiffweb contains business logic errors. A privileged local attacker is able to disable multi factor authentication, which leads to unauthorized access...
CVE-2022-3363
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7...
Code injection
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7...
PYSEC-2022-42978
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7...
PYSEC-2022-42978
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7...
CVE-2022-3363
CVE-2022-3363 affects rdiffweb prior to 2.5.0a7. The issue is described as business logic errors in the GitHub repository ikus060/rdiffweb. Practical impact is reflected by the high base scores in the CVSS vectors (critical in NVD). Affected component: rdiffweb software; root cause: business logi...
Rdiffweb security vulnerabilities
Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. A security vulnerability exists in Rdiffweb versions prior to 2.5.0a7, which stems from the presence of a business logic error...
CVE-2022-3363 Business Logic Errors in ikus060/rdiffweb
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7...
CVE-2022-3363 Business Logic Errors in ikus060/rdiffweb
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7...
CVE-2022-3363: Undefined Security Weakness
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7...
PT-2022-21793 · Rdiffweb · Rdiffweb
Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.0a7 Description: The issue concerns Business Logic Errors in the GitHub repository ikus060/rdiffweb. Recommendations: For versions prior to 2.5.0a7, update to version 2.5.0a7 or later to resolve the issue...
CVE-2022-3363
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7...
Rdiffweb is missing authentication for critical function
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0...
GHSA-99J5-FVG3-54PM Rdiffweb is missing authentication for critical function
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0...
Insecure Session Management
rdiffweb is vulnerable to insecure session management. The vulnerability exists because user sessions are not properly defined with session persistent timeout which allows an attacker to access the active sessions of other users and perform unauthorized actions...