665 matches found
CVE-2022-4646: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.5.4...
CVE-2022-4646 Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.5.4...
CVE-2022-4646
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.5.4...
CVE-2022-4644
CVE-2022-4644 affects the rdiffweb project in the GitHub repository ikus060/rdiffweb, specifically versions prior to 2.5.4. The issue is an Open Redirect vulnerability caused by an input/redirection handling weakness. Impact stated in sources is consistent with an Open Redirect; no exploitation d...
PT-2022-27878 · Rdiffweb · Rdiffweb
Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.4 Description: The issue is related to Cross-Site Request Forgery CSRF in the GitHub repository ikus060/rdiffweb. This allows an attacker to perform unintended actions on a user's account. Recommendations: For...
PT-2022-6548 · Rdiffweb · Rdiffweb
Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.5 Description: The issue is related to a primary weakness in the rdiffweb GitHub repository, allowing for authentication bypass. This weakness is due to the username field not being unique to users, enabling...
Rdiffweb Cross-Site Request Forgery Vulnerability
Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. A cross-site request forgery vulnerability exists in rdiffweb versions prior to 2.5.4. An attacker can exploit this vulnerability to...
Rdiffweb input validation vulnerability
Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. Provides quick access to your archives through an efficient web interface. An input validation error vulnerability exists in rdiffweb versions prior to 2.5.4, which stems from redirection...
CVE-2022-4644 Open Redirect in ikus060/rdiffweb
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4...
CVE-2022-4644: URL Redirection to Untrusted Site
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4...
CVE-2022-4646
The CVE concerns rdiffweb (GitHub: ikus060/rdiffweb) prior to version 2.5.4. The vulnerability is a Cross-Site Request Forgery (CSRF) in the web application, enabling unintended actions on a user’s account. The root cause is CSRF in the vulnerable web interface; no exploit details are provided in...
CVE-2022-4644
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4...
PT-2022-27875 · Rdiffweb · Rdiffweb
Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.4 Description: The issue is an Open Redirect in the GitHub repository ikus060/rdiffweb. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents whe...
Privilege Escalation
rdiffweb is vulnerable to privilege escalation. The vulnerability exists because the library does not properly block repository access when the userroot directory is empty or a relative path, allowing an attacker to modify access roles...
GHSA-G594-55MP-F6Q8 Improper Privilege Management in rdiffweb
Unauthorized access to settings update, logs , history, delete etc in GitHub repository ikus060/rdiffweb prior to 2.5.2...
Improper Privilege Management in rdiffweb
Unauthorized access to settings update, logs , history, delete etc in GitHub repository ikus060/rdiffweb prior to 2.5.2...
CVE-2022-4314
Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2...
PYSEC-2022-43002
Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2...
Rdiffweb security vulnerabilities
Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your files through an efficient web interface. A security vulnerability exists in Rdiffweb versions prior to 2.5.2, which stems from improper privilege management...