4 matches found
CVE-2022-3221
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.4.3...
8.8CVSS6.8AI score0.00759EPSS
SaveExploits1References1
CVE-2022-3221 Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb
Cross-Site Request Forgery CSRF in GitHub repository ikus060/rdiffweb prior to 2.4.3...
8.8CVSS8.7AI score
SaveExploits0References4
CVE-2022-3221
CVE-2022-3221 affects ikus060/rdiffweb prior to version 2.4.3, where a CSRF flaw in the profile SSH keys flow can enable unauthorized access. The issue arises from accepting a GET request during SSH-key operations, leading to key addition without proper user interaction. The vulnerability is miti...
8.8CVSS7.8AI score0.00759EPSS
SaveExploits1References2Affected Software1
20