665 matches found
PYSEC-2022-43161
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...
CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...
CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...
CVE-2022-3457: Origin Validation Error
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...
PT-2022-22208
Name of the Vulnerable Software and Affected Versions rdiffweb versions prior to 2.5.0a5 Description The issue concerns a lack of origin validation in web traffic. This could potentially allow unauthorized access or actions. Users are advised to take action to mitigate this risk. Recommendations...
CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...
CVE-2022-3456
CVE-2022-3456 affects the rdiffweb project (ikus060/rdiffweb) prior to version 2.5.0. The root cause is Allocation of Resources Without Limits or Throttling, potentially enabling resource exhaustion and affecting availability. NVD metrics yield a CRITICAL base score (CVSS 3.1: 9.8, network attack...
Rdiffweb Access Control Vulnerability
Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. Provides quick access to your archives through an efficient web interface. An access control error vulnerability exists in Rdiffweb 2.5.0a5, which stems from a source validation error...
CVE-2022-3457
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...
CVE-2022-3457
CVE-2022-3457 documents an Origin Validation Error in the rdiffweb project by ikus060, prior to version 2.5.0a5. The issue arises from improper origin validation in web traffic, enabling an access-control-related vulnerability. Public references in GHSA and OSV entries corroborate the same adviso...
PT-2022-22206 · Rdiffweb · Rdiffweb
Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.0 Description: The issue concerns the allocation of resources without limits or throttling in the GitHub repository ikus060/rdiffweb. Recommendations: For versions prior to 2.5.0, update to version 2.5.0 or late...
CVE-2022-3456
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...
CVE-2022-3456: Allocation of Resources Without Limits or Throttling
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...
Rdiffweb security vulnerabilities
Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. A security vulnerability exists in Rdiffweb versions prior to 2.5.0 that stems from its failure to limit or throttle resource...
CVE-2022-3456 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...
Patrik Dufresne Rdiffweb user redirection vulnerability
Patrik Dufresne Rdiffweb is a web application from the personal developer Patrik Dufresne, USA. Patrik Dufresne Rdiffweb is vulnerable to a user redirection vulnerability, which stems from the fact that the system does not handle target bounces properly and can be exploited to inject malicious...
rdiff-backup Rdiffweb Redirect
The vulnerability in the rdiff-backup Rdiffweb management web interface involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to remotely redirect users to any given URL address...
Cross-Site Scripting (XSS)
rdiffweb is vulnerable to cross-site scripting. The vulnerability exists due to lack of validations in fullname,username and email which allows a remote attacker to inject and execute malicious javascript into the system...
