Authentication Bypass

rdiffweb is vulnerable to authentication bypass. The vulnerability exists because the validatepassword function of pageadmin.py does not properly validate the password score, allowing an attacker to bypass the application logic to set a blank password...

Denial Of Service (DoS)

rdiffweb is vulnerable to denial of service. The vulnerability exists in pageadmin.py due to not limiting the length of root directory name which allows an attacker to cause an application crash via a malicious input...