PT-2022-28038 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.5 Description: The issue is related to improper access control in the GitHub repository ikus060/rdiffweb. Recommendations: For versions prior to 2.5.5, update to version 2.5.5 or later to resolve the issue...

CVE-2022-4724 Improper Access Control in ikus060/rdiffweb

Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5...

CVE-2022-4723

rdiffweb (ikus060/rdiffweb) prior to version 2.5.5 is affected by an absence of rate limiting on the resend email feature when enabling or disabling 2FA via the /prefs/mfa endpoint. This can allow resource allocation without limits, as described across multiple sources. Affected component is the ...

CVE-2022-4722 Authentication Bypass by Primary Weakness in ikus060/rdiffweb

Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5...

GHSA-639F-HXCV-84MC rdiffweb Open Redirect vulnerability

rdiffweb prior to version 2.5.4 has an Open Redirect vulnerability...

rdiffweb Open Redirect vulnerability

rdiffweb prior to version 2.5.4 has an Open Redirect vulnerability...

rdiffweb vulnerable to Cross-Site Request Forgery

rdiffweb prior to version 2.5.4 is vulnerable to Cross-Site Request Forgery CSRF...

GHSA-85FP-523Q-5XWC rdiffweb vulnerable to Cross-Site Request Forgery

rdiffweb prior to version 2.5.4 is vulnerable to Cross-Site Request Forgery CSRF...

PYSEC-2022-43004

Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.5.4...

PYSEC-2022-43004

Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.5.4...

CVE-2022-4644

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4...

Open redirect

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4...

PYSEC-2022-43003

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4...

CVE-2022-4646 Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb

Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.5.4...

CVE-2022-4646 Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb

Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.5.4...

CVE-2022-4644 Open Redirect in ikus060/rdiffweb

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4...

CVE-2022-4644

CVE-2022-4644 affects the rdiffweb project in the GitHub repository ikus060/rdiffweb, specifically versions prior to 2.5.4. The issue is an Open Redirect vulnerability caused by an input/redirection handling weakness. Impact stated in sources is consistent with an Open Redirect; no exploitation d...

CVE-2022-4644 Open Redirect in ikus060/rdiffweb

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4...

CVE-2022-4646 Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb

Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.5.4...

PT-2022-27878 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.4 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository ikus060/rdiffweb. This allows an attacker to perform unintended actions on a user's account. Recommendations: For...