Privilege Escalation

rdiffweb is vulnerable to privilege escalation. The vulnerability exists because the library does not properly block repository access when the user_root directory is empty or a relative path, allowing an attacker to modify access roles.