544 matches found
PT-2022-22206 · Rdiffweb · Rdiffweb
Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.0 Description: The issue concerns the allocation of resources without limits or throttling in the GitHub repository ikus060/rdiffweb. Recommendations: For versions prior to 2.5.0, update to version 2.5.0 or late...
CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...
CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...
CVE-2022-3456 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...
CVE-2022-3456
CVE-2022-3456 affects the rdiffweb project (ikus060/rdiffweb) prior to version 2.5.0. The root cause is Allocation of Resources Without Limits or Throttling, potentially enabling resource exhaustion and affecting availability. NVD metrics yield a CRITICAL base score (CVSS 3.1: 9.8, network attack...
CVE-2022-3457
CVE-2022-3457 documents an Origin Validation Error in the rdiffweb project by ikus060, prior to version 2.5.0a5. The issue arises from improper origin validation in web traffic, enabling an access-control-related vulnerability. Public references in GHSA and OSV entries corroborate the same adviso...
CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...
Patrik Dufresne Rdiffweb user redirection vulnerability
Patrik Dufresne Rdiffweb is a web application from the personal developer Patrik Dufresne, USA. Patrik Dufresne Rdiffweb is vulnerable to a user redirection vulnerability, which stems from the fact that the system does not handle target bounces properly and can be exploited to inject malicious...
The vulnerability in the rdiff-backup Rdiffweb web management interface allows a hacker to redirect users to any arbitrary URL address.
The vulnerability in the rdiff-backup Rdiffweb management web interface involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to remotely redirect users to any given URL address...
Cross-Site Scripting (XSS)
rdiffweb is vulnerable to cross-site scripting. The vulnerability exists due to lack of validations in fullname,username and email which allows a remote attacker to inject and execute malicious javascript into the system...
GHSA-8G9M-VV69-7J99 rdiffweb vulnerable to Open Redirect
A lack of user input validation leads to an open redirect vulnerability in rdiffweb prior to 2.5.0a4...
rdiffweb vulnerable to Open Redirect
A lack of user input validation leads to an open redirect vulnerability in rdiffweb prior to 2.5.0a4...
CVE-2022-3438
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
CVE-2022-3438
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
PYSEC-2022-43158
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
Open redirect
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
PYSEC-2022-43158
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
PT-2022-5023 · Rdiffweb · Rdiffweb
Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.0a4 Description: The issue is related to an open redirect vulnerability in the web interface of rdiff-backup Rdiffweb. This vulnerability allows a remote attacker to redirect users to an arbitrary URL by...
CVE-2022-3438 Open Redirect in ikus060/rdiffweb
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
Rdiffweb 输入验证错误漏洞
Patrik Dufresne Rdiffweb is a web application from the personal developer Patrik Dufresne, USA. Patrik Dufresne Rdiffweb is vulnerable to a user redirection vulnerability, which stems from the fact that the system does not handle target bounces properly and can be exploited to inject malicious...