547 matches found
CVE-2022-3269
CVE-2022-3269 affects the rdiffweb web application (itas ikus060/rdiffweb) prior to version 2.4.7. The root cause is failure to invalidate session cookies on logout, enabling session fixation where an attacker can reuse a valid cookie to access a user account after login/logout sequences. Impact ...
CVE-2022-3269 Session Fixation in ikus060/rdiffweb
Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7...
CVE-2022-3269 Session Fixation in ikus060/rdiffweb
Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7...
Cross-Site Request Forgery (CSRF)
rdiffweb is vulnerable to cross-site request forgery. The vulnerability exists because the renderprefspanel function in prefnotification.py does not properly handle the passwordform and profileform attributes, allowing an attacker to change the email ID of the user by redirecting to the malicious...
rdiffweb Cross-Site Request Forgery vulnerability can lead to user email ID being changed
rdiffwen prior to version 2.4.7 is vulnerable to Cross-Site Request Forgery CSRF. An attacker can change a user's email ID. Version 2.4.7 has a fix for this issue...
GHSA-GMJ8-84R4-H46J rdiffweb Cross-Site Request Forgery vulnerability can lead to user email ID being changed
rdiffwen prior to version 2.4.7 is vulnerable to Cross-Site Request Forgery CSRF. An attacker can change a user's email ID. Version 2.4.7 has a fix for this issue...
rdiffweb Cross-Site Request Forgery vulnerability
rdiffweb prior to 2.4.6 is vulnerable to cross-site request forgery on the repository settings. A malicious user can change the settings of a repository by sending a URL to the victim. This issue is fixed in version 2.4.6...
GHSA-74J6-3HH4-W3F5 rdiffweb Cross-Site Request Forgery vulnerability
rdiffweb prior to 2.4.6 is vulnerable to cross-site request forgery on the repository settings. A malicious user can change the settings of a repository by sending a URL to the victim. This issue is fixed in version 2.4.6...
Rdiffweb 授权问题漏洞
Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. Provides quick access to your archives through an efficient web interface. An authorization issue vulnerability exists in Rdiffweb versions prior to 2.4.7, which can be exploited by an attacker to steal cookies...
CVE-2022-3274
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.4.7...
PYSEC-2022-289
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.4.7...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.4.7...
CVE-2022-3274
CVE-2022-3274 is a Cross-Site Request Forgery (CSRF) vulnerability affecting the rdiffweb project (GitHub: ikus060/rdiffweb) prior to version 2.4.7. Multiple connected sources describe CSRF exposure that can allow an attacker to change a user's email address/settings. The confirmed remediation is...
CVE-2022-3274 Cross-Site Request Forgery (CSRF) on user's settings in GitHub repository ikus060/rdiffweb prior to 2.4.6. in ikus060/rdiffweb
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.4.7...
CVE-2022-3274 Cross-Site Request Forgery (CSRF) on user's settings in GitHub repository ikus060/rdiffweb prior to 2.4.6. in ikus060/rdiffweb
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.4.7...
CVE-2022-3274 Cross-Site Request Forgery (CSRF) on user's settings in GitHub repository ikus060/rdiffweb prior to 2.4.6. in ikus060/rdiffweb
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.4.7...
CVE-2022-3267
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.4.6...
PYSEC-2022-284
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.4.6...