Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:37576
HistoryOct 16, 2022 - 11:39 p.m.

Privilege Escalation

2022-10-1623:39:48
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
rdiffweb
privilege escalation
origin validation
set_headers function
secure_headers.py
malicious user
insufficient validations

EPSS

0.002

Percentile

59.6%

rdiffweb is vulnerable to Privilege Escalation. An origin validation error allows a malicious user to elevate their privileges, due to insufficient validations in set_headers function in tools/secure_headers.py.

EPSS

0.002

Percentile

59.6%

Related for VERACODE:37576