Lucene search
Veracode Vulnerability DatabaseVERACODE:38753HistoryJan 03, 2023 - 12:33 p.m.
Business Logic Errors
2023-01-0312:33:16
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
rdiffweb
vulnerability
adding
ssh key
user notification
software
EPSS
0.002
Percentile
55.9%
rdiffweb is vulnerable to business logic errors. The vulnerability exists because the library does not properly trigger notifications when adding an ssh key which allows an attacker to add any ssh key without aware of the user
Related
osv
osv
rdiffweb vulnerable to Business Logic Errors
2022-12-27 15:30:19
PYSEC-2022-43005
2022-12-27 15:15:00
CVE-2022-4719
2022-12-27 15:15:11
github
github
rdiffweb vulnerable to Business Logic Errors
2022-12-27 15:30:19
cvelist
cvelist
CVE-2022-4719 Business Logic Errors in ikus060/rdiffweb
2022-12-23 00:00:00
nvd
nvd
CVE-2022-4719
2022-12-27 15:15:11
cve
cve
CVE-2022-4719
2022-12-27 15:15:11
prion
prion
Code injection
2022-12-27 15:15:00
huntr
huntr
No notification triggered on sensitive actions like adding SSH key
2022-12-20 15:27:05