3 matches found
CVE-2022-3376
CVE-2022-3376 affects rdiffweb (ikus060/rdiffweb) prior to version 2.5.0a4. The reported issue is weak password requirements that allow a new password to be the same as the old one during password reset. According to multiple sources (GHSA/OSV/PYSEC and NVD entries), this is mitigated in 2.5.0a4 ...
5.3CVSS4.5AI score0.00724EPSS
SaveExploits1References2Affected Software1
20