| 0 |
| url |
VCID-1fg8-rcx8-77fq |
| vulnerability_id |
VCID-1fg8-rcx8-77fq |
| summary |
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.0 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H |
|
| 1 |
| value |
7.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.7 |
| purl |
pkg:pypi/rdiffweb@2.4.7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 8 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 9 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 10 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 11 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 12 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 13 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 14 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 15 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 16 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 17 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 18 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 19 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 20 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 21 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 22 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 23 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 24 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.7 |
|
|
| aliases |
CVE-2022-3274, GHSA-gmj8-84r4-h46j, PYSEC-2022-289
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1fg8-rcx8-77fq |
|
| 1 |
| url |
VCID-25yw-5nru-aygm |
| vulnerability_id |
VCID-25yw-5nru-aygm |
| summary |
Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4314, GHSA-g594-55mp-f6q8, PYSEC-2022-43002
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-25yw-5nru-aygm |
|
| 2 |
|
| 3 |
| url |
VCID-29xz-5wxu-ybed |
| vulnerability_id |
VCID-29xz-5wxu-ybed |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.8 |
| purl |
pkg:pypi/rdiffweb@2.4.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 9 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 10 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 11 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 12 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 13 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 14 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 15 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 16 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 17 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 18 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 19 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8 |
|
|
| aliases |
CVE-2022-3298, GHSA-xhw9-4wqq-x67v, PYSEC-2022-294
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-29xz-5wxu-ybed |
|
| 4 |
| url |
VCID-52wf-fheq-cuer |
| vulnerability_id |
VCID-52wf-fheq-cuer |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4. |
| references |
| 0 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2023-5289, GHSA-c4rv-2j6x-pq7x, PYSEC-2023-186
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-52wf-fheq-cuer |
|
| 5 |
| url |
VCID-57wc-s2nn-cyeu |
| vulnerability_id |
VCID-57wc-s2nn-cyeu |
| summary |
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
7.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4646, GHSA-85fp-523q-5xwc, PYSEC-2022-43004
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-57wc-s2nn-cyeu |
|
| 6 |
| url |
VCID-5922-k3p7-pfdj |
| vulnerability_id |
VCID-5922-k3p7-pfdj |
| summary |
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3. |
| references |
| 0 |
|
| 1 |
|
| 2 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.3 |
| purl |
pkg:pypi/rdiffweb@2.4.3 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fg8-rcx8-77fq |
|
| 1 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 2 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 3 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 4 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 5 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 10 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 11 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 12 |
| vulnerability |
VCID-fxxn-nnzy-97bv |
|
| 13 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 14 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 15 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 16 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 17 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 18 |
| vulnerability |
VCID-pva4-gkpj-juh8 |
|
| 19 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 20 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 21 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 22 |
| vulnerability |
VCID-t1sj-158f-efey |
|
| 23 |
| vulnerability |
VCID-tjr6-1mzd-93ee |
|
| 24 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 25 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 26 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 27 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 28 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 29 |
| vulnerability |
VCID-z43n-dk6v-pffh |
|
| 30 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.3 |
|
|
| aliases |
CVE-2022-3221, GHSA-vq4h-xrwc-m639, PYSEC-2022-278
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5922-k3p7-pfdj |
|
| 7 |
| url |
VCID-5xg7-u3nr-nkfg |
| vulnerability_id |
VCID-5xg7-u3nr-nkfg |
| summary |
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-3362, GHSA-94qm-99qc-qwqj, PYSEC-2022-43000
|
| risk_score |
4.4 |
| exploitability |
0.5 |
| weighted_severity |
8.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5xg7-u3nr-nkfg |
|
| 8 |
| url |
VCID-6zc1-xs64-1bc6 |
| vulnerability_id |
VCID-6zc1-xs64-1bc6 |
| summary |
Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4724, GHSA-m8r9-qxx8-mrxp, PYSEC-2022-43010
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6zc1-xs64-1bc6 |
|
| 9 |
| url |
VCID-91jt-tgps-27b2 |
| vulnerability_id |
VCID-91jt-tgps-27b2 |
| summary |
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2. |
| references |
| 0 |
|
| 1 |
|
| 2 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.2 |
| purl |
pkg:pypi/rdiffweb@2.4.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fg8-rcx8-77fq |
|
| 1 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 2 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 3 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 4 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 5 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 6 |
| vulnerability |
VCID-5922-k3p7-pfdj |
|
| 7 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 8 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 9 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 10 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 11 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 12 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 13 |
| vulnerability |
VCID-fxxn-nnzy-97bv |
|
| 14 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 15 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 16 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 17 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 18 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 19 |
| vulnerability |
VCID-pva4-gkpj-juh8 |
|
| 20 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 21 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 22 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 23 |
| vulnerability |
VCID-t1sj-158f-efey |
|
| 24 |
| vulnerability |
VCID-tjr6-1mzd-93ee |
|
| 25 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 26 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 27 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 28 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 29 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 30 |
| vulnerability |
VCID-z43n-dk6v-pffh |
|
| 31 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2 |
|
|
| aliases |
CVE-2022-3175, GHSA-ch4c-278q-5654, PYSEC-2022-273
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-91jt-tgps-27b2 |
|
| 10 |
| url |
VCID-9f5c-ne9b-27fd |
| vulnerability_id |
VCID-9f5c-ne9b-27fd |
| summary |
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |
|
| 1 |
| value |
2.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P |
|
| 2 |
| value |
LOW |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.11a1 |
| purl |
pkg:pypi/rdiffweb@2.4.11a1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 7 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 8 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 9 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 10 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 11 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 12 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 13 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 14 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 15 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1 |
|
| 1 |
|
|
| aliases |
CVE-2022-4018, GHSA-4wph-9vrm-6v3w, PYSEC-2022-43001
|
| risk_score |
1.9 |
| exploitability |
0.5 |
| weighted_severity |
3.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9f5c-ne9b-27fd |
|
| 11 |
| url |
VCID-dpbu-gy6u-abd3 |
| vulnerability_id |
VCID-dpbu-gy6u-abd3 |
| summary |
Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.8 |
| purl |
pkg:pypi/rdiffweb@2.4.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 9 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 10 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 11 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 12 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 13 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 14 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 15 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 16 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 17 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 18 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 19 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8 |
|
|
| aliases |
CVE-2022-3272, GHSA-qrj3-hrgj-fm7r, PYSEC-2022-291
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dpbu-gy6u-abd3 |
|
| 12 |
| url |
VCID-e351-976k-sqak |
| vulnerability_id |
VCID-e351-976k-sqak |
| summary |
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. |
| references |
| 0 |
|
| 1 |
|
| 2 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.2 |
| purl |
pkg:pypi/rdiffweb@2.4.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fg8-rcx8-77fq |
|
| 1 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 2 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 3 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 4 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 5 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 6 |
| vulnerability |
VCID-5922-k3p7-pfdj |
|
| 7 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 8 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 9 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 10 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 11 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 12 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 13 |
| vulnerability |
VCID-fxxn-nnzy-97bv |
|
| 14 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 15 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 16 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 17 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 18 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 19 |
| vulnerability |
VCID-pva4-gkpj-juh8 |
|
| 20 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 21 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 22 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 23 |
| vulnerability |
VCID-t1sj-158f-efey |
|
| 24 |
| vulnerability |
VCID-tjr6-1mzd-93ee |
|
| 25 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 26 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 27 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 28 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 29 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 30 |
| vulnerability |
VCID-z43n-dk6v-pffh |
|
| 31 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2 |
|
|
| aliases |
CVE-2022-3179, GHSA-mp5p-g2jv-r8qw, PYSEC-2022-272
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-e351-976k-sqak |
|
| 13 |
| url |
VCID-ep38-eu98-fbas |
| vulnerability_id |
VCID-ep38-eu98-fbas |
| summary |
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4721, GHSA-83pm-7v48-5jp4, PYSEC-2022-43007
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ep38-eu98-fbas |
|
| 14 |
|
| 15 |
| url |
VCID-fxxn-nnzy-97bv |
| vulnerability_id |
VCID-fxxn-nnzy-97bv |
| summary |
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.5 |
| purl |
pkg:pypi/rdiffweb@2.4.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fg8-rcx8-77fq |
|
| 1 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 2 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 3 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 4 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 5 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 10 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 11 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 12 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 13 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 14 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 15 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 16 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 17 |
| vulnerability |
VCID-pva4-gkpj-juh8 |
|
| 18 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 19 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 20 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 21 |
| vulnerability |
VCID-t1sj-158f-efey |
|
| 22 |
| vulnerability |
VCID-tjr6-1mzd-93ee |
|
| 23 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 24 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 25 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 26 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 27 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 28 |
| vulnerability |
VCID-z43n-dk6v-pffh |
|
| 29 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.5 |
|
|
| aliases |
CVE-2022-3232, GHSA-cw2v-wv4g-w4p6, PYSEC-2022-281
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fxxn-nnzy-97bv |
|
| 16 |
| url |
VCID-h6v3-24fq-3udw |
| vulnerability_id |
VCID-h6v3-24fq-3udw |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
7.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4723, GHSA-7q4r-x5qg-mmcp, PYSEC-2022-43009
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-h6v3-24fq-3udw |
|
| 17 |
| url |
VCID-khum-ewzn-yfe6 |
| vulnerability_id |
VCID-khum-ewzn-yfe6 |
| summary |
Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1. |
| references |
| 0 |
|
| 1 |
|
| 2 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.1 |
| purl |
pkg:pypi/rdiffweb@2.4.1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fg8-rcx8-77fq |
|
| 1 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 2 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 3 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 4 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 5 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 6 |
| vulnerability |
VCID-5922-k3p7-pfdj |
|
| 7 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 8 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 9 |
| vulnerability |
VCID-91jt-tgps-27b2 |
|
| 10 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 11 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 12 |
| vulnerability |
VCID-e351-976k-sqak |
|
| 13 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 14 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 15 |
| vulnerability |
VCID-fxxn-nnzy-97bv |
|
| 16 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 17 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 18 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 19 |
| vulnerability |
VCID-n9ht-12n5-b7c9 |
|
| 20 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 21 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 22 |
| vulnerability |
VCID-pva4-gkpj-juh8 |
|
| 23 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 24 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 25 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 26 |
| vulnerability |
VCID-t1sj-158f-efey |
|
| 27 |
| vulnerability |
VCID-tjr6-1mzd-93ee |
|
| 28 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 29 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 30 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 31 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 32 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 33 |
| vulnerability |
VCID-z43n-dk6v-pffh |
|
| 34 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.1 |
|
|
| aliases |
CVE-2022-3167, GHSA-m379-x4xc-38x9, PYSEC-2022-268
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-khum-ewzn-yfe6 |
|
| 18 |
| url |
VCID-mr71-9e9c-zbda |
| vulnerability_id |
VCID-mr71-9e9c-zbda |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.8 |
| purl |
pkg:pypi/rdiffweb@2.4.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 9 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 10 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 11 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 12 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 13 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 14 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 15 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 16 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 17 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 18 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 19 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8 |
|
|
| aliases |
CVE-2022-3295, GHSA-hrj7-f62f-j7x7, PYSEC-2022-293
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mr71-9e9c-zbda |
|
| 19 |
|
| 20 |
| url |
VCID-n9ht-12n5-b7c9 |
| vulnerability_id |
VCID-n9ht-12n5-b7c9 |
| summary |
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2. |
| references |
| 0 |
|
| 1 |
|
| 2 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
|
| 1 |
| value |
7.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.2 |
| purl |
pkg:pypi/rdiffweb@2.4.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fg8-rcx8-77fq |
|
| 1 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 2 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 3 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 4 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 5 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 6 |
| vulnerability |
VCID-5922-k3p7-pfdj |
|
| 7 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 8 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 9 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 10 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 11 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 12 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 13 |
| vulnerability |
VCID-fxxn-nnzy-97bv |
|
| 14 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 15 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 16 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 17 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 18 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 19 |
| vulnerability |
VCID-pva4-gkpj-juh8 |
|
| 20 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 21 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 22 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 23 |
| vulnerability |
VCID-t1sj-158f-efey |
|
| 24 |
| vulnerability |
VCID-tjr6-1mzd-93ee |
|
| 25 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 26 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 27 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 28 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 29 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 30 |
| vulnerability |
VCID-z43n-dk6v-pffh |
|
| 31 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2 |
|
|
| aliases |
CVE-2022-3174, GHSA-mjw4-xvx6-3grg, PYSEC-2022-271
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-n9ht-12n5-b7c9 |
|
| 21 |
| url |
VCID-nc4e-1muy-1kd7 |
| vulnerability_id |
VCID-nc4e-1muy-1kd7 |
| summary |
Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
2.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
4.8 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.8 |
| purl |
pkg:pypi/rdiffweb@2.4.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 9 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 10 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 11 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 12 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 13 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 14 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 15 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 16 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 17 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 18 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 19 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8 |
|
|
| aliases |
CVE-2022-3301, GHSA-qq29-5vjh-vxwr, PYSEC-2022-295
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nc4e-1muy-1kd7 |
|
| 22 |
| url |
VCID-ps4e-cg34-wyah |
| vulnerability_id |
VCID-ps4e-cg34-wyah |
| summary |
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.5.0a7 |
| purl |
pkg:pypi/rdiffweb@2.5.0a7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 7 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 8 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 9 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 10 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 11 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 12 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 13 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 14 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 15 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a7 |
|
| 1 |
|
|
| aliases |
CVE-2022-3363, GHSA-jw36-mrvg-j5fx, PYSEC-2022-42978
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ps4e-cg34-wyah |
|
| 23 |
| url |
VCID-pva4-gkpj-juh8 |
| vulnerability_id |
VCID-pva4-gkpj-juh8 |
| summary |
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.6 |
| purl |
pkg:pypi/rdiffweb@2.4.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fg8-rcx8-77fq |
|
| 1 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 2 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 3 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 4 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 5 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 10 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 11 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 12 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 13 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 14 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 15 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 16 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 17 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 18 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 19 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 20 |
| vulnerability |
VCID-t1sj-158f-efey |
|
| 21 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 22 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 23 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 24 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 25 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 26 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6 |
|
|
| aliases |
CVE-2022-3250, GHSA-m748-hjqg-rpp8, PYSEC-2022-287
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-pva4-gkpj-juh8 |
|
| 24 |
| url |
VCID-qcsd-5htt-h3ev |
| vulnerability_id |
VCID-qcsd-5htt-h3ev |
| summary |
Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.2 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.6 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4722, GHSA-wf33-6x33-wcf9, PYSEC-2022-43008
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qcsd-5htt-h3ev |
|
| 25 |
|
| 26 |
| url |
VCID-sn4z-f439-6qe7 |
| vulnerability_id |
VCID-sn4z-f439-6qe7 |
| summary |
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.11a1 |
| purl |
pkg:pypi/rdiffweb@2.4.11a1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 7 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 8 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 9 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 10 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 11 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 12 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 13 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 14 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 15 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1 |
|
| 1 |
|
|
| aliases |
CVE-2022-3376, GHSA-7wr6-fj4x-893v, PYSEC-2022-43157
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sn4z-f439-6qe7 |
|
| 27 |
| url |
VCID-t1sj-158f-efey |
| vulnerability_id |
VCID-t1sj-158f-efey |
| summary |
Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.7 |
| purl |
pkg:pypi/rdiffweb@2.4.7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 8 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 9 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 10 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 11 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 12 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 13 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 14 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 15 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 16 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 17 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 18 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 19 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 20 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 21 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 22 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 23 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 24 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.7 |
|
|
| aliases |
CVE-2022-3269, GHSA-j3q4-gmj4-mj95, PYSEC-2022-290
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-t1sj-158f-efey |
|
| 28 |
| url |
VCID-tjr6-1mzd-93ee |
| vulnerability_id |
VCID-tjr6-1mzd-93ee |
| summary |
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.6 |
| purl |
pkg:pypi/rdiffweb@2.4.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fg8-rcx8-77fq |
|
| 1 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 2 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 3 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 4 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 5 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 10 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 11 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 12 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 13 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 14 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 15 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 16 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 17 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 18 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 19 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 20 |
| vulnerability |
VCID-t1sj-158f-efey |
|
| 21 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 22 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 23 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 24 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 25 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 26 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6 |
|
|
| aliases |
CVE-2022-3233, GHSA-9vxf-mcm6-5m42, PYSEC-2022-285
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tjr6-1mzd-93ee |
|
| 29 |
|
| 30 |
| url |
VCID-vmrb-sm2h-hqf1 |
| vulnerability_id |
VCID-vmrb-sm2h-hqf1 |
| summary |
Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.8 |
| purl |
pkg:pypi/rdiffweb@2.4.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 9 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 10 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 11 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 12 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 13 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 14 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 15 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 16 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 17 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 18 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 19 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8 |
|
|
| aliases |
CVE-2022-3290, GHSA-5v95-j4rr-6f3c, PYSEC-2022-292, PYSEC-2022-43184
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vmrb-sm2h-hqf1 |
|
| 31 |
|
| 32 |
|
| 33 |
| url |
VCID-yz9x-nz9u-wybe |
| vulnerability_id |
VCID-yz9x-nz9u-wybe |
| summary |
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.10 |
| purl |
pkg:pypi/rdiffweb@2.4.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 9 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 10 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 11 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 12 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 13 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 14 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 15 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 16 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 17 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 18 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10 |
|
| 1 |
|
|
| aliases |
CVE-2022-3327, GHSA-99j5-fvg3-54pm, PYSEC-2022-42977
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-yz9x-nz9u-wybe |
|
| 34 |
| url |
VCID-z43n-dk6v-pffh |
| vulnerability_id |
VCID-z43n-dk6v-pffh |
| summary |
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.6 |
| purl |
pkg:pypi/rdiffweb@2.4.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fg8-rcx8-77fq |
|
| 1 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 2 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 3 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 4 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 5 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 10 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 11 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 12 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 13 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 14 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 15 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 16 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 17 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 18 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 19 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 20 |
| vulnerability |
VCID-t1sj-158f-efey |
|
| 21 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 22 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 23 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 24 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 25 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 26 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6 |
|
|
| aliases |
CVE-2022-3267, GHSA-74j6-3hh4-w3f5, PYSEC-2022-284
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-z43n-dk6v-pffh |
|
| 35 |
| url |
VCID-zzjz-9wv2-vfcc |
| vulnerability_id |
VCID-zzjz-9wv2-vfcc |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.11a1 |
| purl |
pkg:pypi/rdiffweb@2.4.11a1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 7 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 8 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 9 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 10 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 11 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 12 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 13 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 14 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 15 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1 |
|
| 1 |
|
|
| aliases |
CVE-2022-3273, GHSA-9g3v-v24q-jj5p, PYSEC-2022-43156
|
| risk_score |
4.4 |
| exploitability |
0.5 |
| weighted_severity |
8.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zzjz-9wv2-vfcc |
|