547 matches found
PYSEC-2022-43161
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...
CVE-2022-3457
CVE-2022-3457 documents an Origin Validation Error in the rdiffweb project by ikus060, prior to version 2.5.0a5. The issue arises from improper origin validation in web traffic, enabling an access-control-related vulnerability. Public references in GHSA and OSV entries corroborate the same adviso...
CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...
CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...
PT-2022-22206 · Rdiffweb · Rdiffweb
Name of the Vulnerable Software and Affected Versions: rdiffweb versions prior to 2.5.0 Description: The issue concerns the allocation of resources without limits or throttling in the GitHub repository ikus060/rdiffweb. Recommendations: For versions prior to 2.5.0, update to version 2.5.0 or late...
CVE-2022-3456 Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0...
Rdiffweb 安全漏洞
Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. It provides quick access to your archives through an efficient web interface. A security vulnerability exists in Rdiffweb versions prior to 2.5.0 that stems from its failure to limit or throttle resource...
CVE-2022-3456
CVE-2022-3456 affects the rdiffweb project (ikus060/rdiffweb) prior to version 2.5.0. The root cause is Allocation of Resources Without Limits or Throttling, potentially enabling resource exhaustion and affecting availability. NVD metrics yield a CRITICAL base score (CVSS 3.1: 9.8, network attack...
Rdiffweb 访问控制错误漏洞
Rdiffweb is a web application by Patrik Dufresne, an individual developer in the USA. Provides quick access to your archives through an efficient web interface. An access control error vulnerability exists in Rdiffweb 2.5.0a5, which stems from a source validation error...
CVE-2022-3457 Origin Validation Error in ikus060/rdiffweb
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5...
The vulnerability in the rdiff-backup Rdiffweb web management interface allows a hacker to redirect users to any arbitrary URL address.
The vulnerability in the rdiff-backup Rdiffweb management web interface involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows a malicious actor to remotely redirect users to any given URL address...
Patrik Dufresne Rdiffweb user redirection vulnerability
Patrik Dufresne Rdiffweb is a web application from the personal developer Patrik Dufresne, USA. Patrik Dufresne Rdiffweb is vulnerable to a user redirection vulnerability, which stems from the fact that the system does not handle target bounces properly and can be exploited to inject malicious...
Cross-Site Scripting (XSS)
rdiffweb is vulnerable to cross-site scripting. The vulnerability exists due to lack of validations in fullname,username and email which allows a remote attacker to inject and execute malicious javascript into the system...
GHSA-8G9M-VV69-7J99 rdiffweb vulnerable to Open Redirect
A lack of user input validation leads to an open redirect vulnerability in rdiffweb prior to 2.5.0a4...
rdiffweb vulnerable to Open Redirect
A lack of user input validation leads to an open redirect vulnerability in rdiffweb prior to 2.5.0a4...
CVE-2022-3438
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
CVE-2022-3438
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
PYSEC-2022-43158
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4...
