PYSEC-2022-42977

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...

CVE-2022-3327

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...

CVE-2022-3327 Missing Authentication for Critical Function in ikus060/rdiffweb

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...

Rdiffweb Access Control Vulnerability

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. An access control error vulnerability exists in Rdiffweb versions prior to 2.5.0a6, which stems from a lack of authentication for...

CVE-2022-3327

CVE-2022-3327 affects rdiffweb (GitHub: ikus060/rdiffweb) with a missing authentication flaw in a critical function prior to version 2.5.0a6. The issue stems from insufficient access controls on a function that should require authentication, enabling potential unauthorized access or actions. Publ...

CVE-2022-3327 Missing Authentication for Critical Function in ikus060/rdiffweb

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...

PT-2022-21760 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.0a6 Description: The issue concerns a missing authentication for a critical function in the GitHub repository ikus060/rdiffweb. Recommendations: For versions prior to 2.5.0a6, update to version 2.5.0a6 or later ...

CVE-2022-3327: Missing Authentication for Critical Function

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6...

Authentication Bypass

rdiffweb is vulnerable to authentication bypass. The vulnerability is due to a lack of a rate limit on the user login feature which allows an attacker to bruteforce the login page and access the previous user sessions...

Denial Of Service (DoS)

rdiffweb is vulnerable to denial of service. The vulnerability is due to the function checkratelimit in ratelimit.py missing a maximum number of requests per hour on sensitive endpoints allowing an attacker to cause an application crash via malicious input...

Privilege Escalation

rdiffweb is vulnerable to Privilege Escalation. An origin validation error allows a malicious user to elevate their privileges, due to insufficient validations in setheaders function in tools/secureheaders.py...

Missing rate limit on rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...

CVE-2022-3439

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...

PYSEC-2022-43159

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...

PYSEC-2022-43159

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...

GHSA-824X-JCXF-HPFG Origin Validation Error in rdiffweb

ikus060/rdiffweb prior to 2.5.0a5 did not enforce origin validation in web traffic. Users are advised to upgrade to version 2.5.0a5...

Origin Validation Error in rdiffweb

ikus060/rdiffweb prior to 2.5.0a5 did not enforce origin validation in web traffic. Users are advised to upgrade to version 2.5.0a5...

Missing rate limit on rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...

CVE-2022-3439

CVE-2022-3439 affects rdiffweb in the GitHub repository ikus060/rdiffweb prior to version 2.5.0. The root cause is allocation of resources without limits or throttling, which can impact availability and also affect confidentiality and integrity as indicated by CVSS 3.1/3.0 assessments (high impac...

PT-2022-22157 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.0 Description: The issue is related to the allocation of resources without limits or throttling in the GitHub repository ikus060/rdiffweb. Recommendations: For versions prior to 2.5.0, update to version 2.5.0 or...