Design/Logic Flaw

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

PYSEC-2022-302

Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10...

Path traversal

Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10...

PYSEC-2022-302

Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10...

PYSEC-2022-43157

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

PYSEC-2022-43157

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

PYSEC-2022-43156

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

Denial Of Service (DoS)

rdiffweb is vulnerable to Denial Of Service DoS. A malicious user is able to set the Token name with a long string leading to memory corruption, resulting in an application crash...

CVE-2022-3376

CVE-2022-3376 affects rdiffweb (ikus060/rdiffweb) prior to version 2.5.0a4. The reported issue is weak password requirements that allow a new password to be the same as the old one during password reset. According to multiple sources (GHSA/OSV/PYSEC and NVD entries), this is mitigated in 2.5.0a4 ...

PT-2022-21868 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.0a4 Description: The issue concerns weak password requirements. Specifically, it allows users to set their new password to be the same as the old password during a password reset. This is resolved in version...

Rdiffweb 路径遍历漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your files through an efficient web interface. A path traversal vulnerability exists in Rdiffweb versions prior to 2.4.10, which stems from a vulnerability that allows an attacker to...

PT-2022-21891 · Rdiffweb · Rdiffweb

Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.4.10 Description: The issue is related to Path Traversal in the GitHub repository ikus060/rdiffweb. Recommendations: For versions prior to 2.4.10, update to version 2.4.10 to resolve the issue...

CVE-2022-3389 Path Traversal in ikus060/rdiffweb

Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10...

CVE-2022-3273

CVE-2022-3273 affects the GitHub repository ikus060/rdiffweb, specifically versions prior to 2.5.0a4. The root cause is an allocation of resources without limits or throttling. The vulnerability can lead to resource exhaustion, affecting availability and potentially exposing or degrading service ...

CVE-2022-3389: Improper Limitation of a Pathname to a Restricted Directory

Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10...

CVE-2022-3376: Weak Password Requirements

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...

CVE-2022-3389

The CVE-2022-3389 entry concerns the Rdiffweb project (ikus060/rdiffweb). Affected version: prior to 2.4.10, with a Path Traversal vulnerability in the file/path handling. The issue is documented as a vulnerability in path traversal (no exploitation details provided in the connected sources). Mit...

Rdiffweb 加密问题漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. A security vulnerability exists in Rdiffweb versions prior to 2.5.0a4, which stems from the fact that it does not reasonably limit or...

Rdiffweb 安全漏洞

Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your files through an efficient web interface. A security vulnerability exists in Rdiffweb versions prior to 2.5.0a4, which stems from a failure to require a password setting that...

CVE-2022-3273: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...