EPSS
Percentile
37.9%
rdiffweb is vulnerable to denial of service. The vulnerability exists in page_admin.py due to not limiting the length of root directory name which allows an attacker to cause an application crash via a malicious input.
page_admin.py
github.com/advisories/GHSA-hrj7-f62f-j7x7
github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3
huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233
huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233/