Lucene search
K

544 matches found

Positive Technologies
Positive Technologies
added 2022/10/13 12:0 a.m.1 views

PT-2022-22206 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.0 Description: The issue concerns the allocation of resources without limits or throttling in the GitHub repository ikus060/rdiffweb. Recommendations: For versions prior to 2.5.0, update to version 2.5.0 or late...

9.8CVSS5.9AI score0.00345EPSS
Exploits0References9
Vulnrichment
Vulnrichment
added 2022/10/13 12:0 a.m.4 views

CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...

3.7CVSS9.5AI score0.00317EPSS
Exploits0References2
Cvelist
Cvelist
added 2022/10/13 12:0 a.m.30 views

CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...

3.7CVSS9.8AI score0.00317EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2022/10/13 12:0 a.m.4 views

CVE-2022-3456 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...

5.6CVSS9.5AI score0.00345EPSS
Exploits0References2
CVE
CVE
added 2022/10/13 12:0 a.m.67 views

CVE-2022-3456

CVE-2022-3456 affects the rdiffweb project (ikus060/rdiffweb) prior to version 2.5.0. The root cause is Allocation of Resources Without Limits or Throttling, potentially enabling resource exhaustion and affecting availability. NVD metrics yield a CRITICAL base score (CVSS 3.1: 9.8, network attack...

9.8CVSS7.4AI score0.00345EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2022/10/13 12:0 a.m.67 views

CVE-2022-3457

CVE-2022-3457 documents an Origin Validation Error in the rdiffweb project by ikus060, prior to version 2.5.0a5. The issue arises from improper origin validation in web traffic, enabling an access-control-related vulnerability. Public references in GHSA and OSV entries corroborate the same adviso...

9.8CVSS6.7AI score0.00317EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2022/10/13 12:0 a.m.23 views

CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...

3.7CVSS4.7AI score0.00317EPSS
Exploits0References4
CNVD
CNVD
added 2022/10/12 12:0 a.m.16 views

Patrik Dufresne Rdiffweb user redirection vulnerability

Patrik Dufresne Rdiffweb is a web application from the personal developer Patrik Dufresne, USA. Patrik Dufresne Rdiffweb is vulnerable to a user redirection vulnerability, which stems from the fact that the system does not handle target bounces properly and can be exploited to inject malicious...

6.1CVSS2.1AI score0.00492EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2022/10/12 12:0 a.m.6 views

The vulnerability in the rdiff-backup Rdiffweb web management interface allows a hacker to redirect users to any arbitrary URL address.

The vulnerability in the rdiff-backup Rdiffweb management web interface involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to remotely redirect users to any given URL address...

8.7CVSS6AI score0.00492EPSS
Exploits1References3Affected Software1
Veracode
Veracode
added 2022/10/11 12:12 p.m.15 views

Cross-Site Scripting (XSS)

rdiffweb is vulnerable to cross-site scripting. The vulnerability exists due to lack of validations in fullname,username and email which allows a remote attacker to inject and execute malicious javascript into the system...

6.1CVSS6AI score0.00492EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2022/10/10 7:0 p.m.19 views

GHSA-8G9M-VV69-7J99 rdiffweb vulnerable to Open Redirect

A lack of user input validation leads to an open redirect vulnerability in rdiffweb prior to 2.5.0a4...

6.1CVSS6AI score0.00492EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2022/10/10 7:0 p.m.25 views

rdiffweb vulnerable to Open Redirect

A lack of user input validation leads to an open redirect vulnerability in rdiffweb prior to 2.5.0a4...

6.1CVSS6.1AI score0.00492EPSS
Exploits1References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/10/10 12:15 p.m.3 views

CVE-2022-3438

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

6.1CVSS6.2AI score0.00492EPSS
Exploits1References3
NVD
NVD
added 2022/10/10 12:15 p.m.21 views

CVE-2022-3438

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

6.1CVSS0.00492EPSS
Exploits1References2
PyPA
PyPA
added 2022/10/10 12:15 p.m.4 views

PYSEC-2022-43158

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

6.1CVSS6.8AI score0.00492EPSS
Exploits1References6Affected Software1
Prion
Prion
added 2022/10/10 12:15 p.m.7 views

Open redirect

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

5.8CVSS6.2AI score0.00492EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/10/10 12:15 p.m.3 views

PYSEC-2022-43158

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

6.1CVSS6.2AI score0.00492EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2022/10/10 12:0 a.m.3 views

PT-2022-5023 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.0a4 Description: The issue is related to an open redirect vulnerability in the web interface of rdiff-backup Rdiffweb. This vulnerability allows a remote attacker to redirect users to an arbitrary URL by...

8.7CVSS5.6AI score0.00492EPSS
Exploits1References10
Cvelist
Cvelist
added 2022/10/10 12:0 a.m.28 views

CVE-2022-3438 Open Redirect in ikus060/rdiffweb

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

5.7CVSS6.5AI score0.00492EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/10/10 12:0 a.m.6 views

Rdiffweb 输入验证错误漏洞

Patrik Dufresne Rdiffweb is a web application from the personal developer Patrik Dufresne, USA. Patrik Dufresne Rdiffweb is vulnerable to a user redirection vulnerability, which stems from the fact that the system does not handle target bounces properly and can be exploited to inject malicious...

6.1CVSS6.9AI score0.00492EPSS
Exploits1References3
Rows per page
Query Builder