Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/29264?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/29264?format=api", "purl": "pkg:pypi/rdiffweb@2.3.6", "type": "pypi", "namespace": "", "name": "rdiffweb", "version": "2.3.6", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "2.5.0a3", "latest_non_vulnerable_version": "2.10.6", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36239?format=api", "vulnerability_id": "VCID-1fg8-rcx8-77fq", "summary": "Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3274", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00683", "scoring_system": "epss", "scoring_elements": "0.72043", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3274" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/e974df75bdbcff3996ad70bd1b4424ec1485ea3f", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/e974df75bdbcff3996ad70bd1b4424ec1485ea3f" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-289.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-289.yaml" }, { "reference_url": "https://huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3274", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.0", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3274" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29291?format=api", "purl": "pkg:pypi/rdiffweb@2.4.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.7" } ], "aliases": [ "CVE-2022-3274", "GHSA-gmj8-84r4-h46j", "PYSEC-2022-289" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-1fg8-rcx8-77fq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36327?format=api", "vulnerability_id": "VCID-25yw-5nru-aygm", "summary": "Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4314", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00448", "scoring_system": "epss", "scoring_elements": "0.63873", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4314" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/b2df3679564d0daa2856213bb307d3e34bd89a25", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/b2df3679564d0daa2856213bb307d3e34bd89a25" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43002.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43002.yaml" }, { "reference_url": "https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4314", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4314" }, { "reference_url": "https://www.cve.org/CVERecord?id=CVE-2022-4314", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://www.cve.org/CVERecord?id=CVE-2022-4314" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/30266?format=api", "purl": "pkg:pypi/rdiffweb@2.5.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.2" } ], "aliases": [ "CVE-2022-4314", "GHSA-g594-55mp-f6q8", "PYSEC-2022-43002" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-25yw-5nru-aygm" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36349?format=api", "vulnerability_id": "VCID-287j-23ju-9fhk", "summary": "Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4720", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00136", "scoring_system": "epss", "scoring_elements": "0.33196", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4720" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43006.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43006.yaml" }, { "reference_url": "https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4720", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L" }, { "value": "8.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4720" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/31062?format=api", "purl": "pkg:pypi/rdiffweb@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-52wf-fheq-cuer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5" } ], "aliases": [ "CVE-2022-4720", "GHSA-h5wp-jrqc-cwwx", "PYSEC-2022-43006" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-287j-23ju-9fhk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36246?format=api", "vulnerability_id": "VCID-29xz-5wxu-ybed", "summary": "Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3298", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00334", "scoring_system": "epss", "scoring_elements": "0.5655", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3298" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/626cca1b75b6c587afd4241a9692e8929b1921a5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/626cca1b75b6c587afd4241a9692e8929b1921a5" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-294.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-294.yaml" }, { "reference_url": "https://huntr.dev/bounties/f9fedf94-41c9-49c4-8552-e407123a44e7", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/f9fedf94-41c9-49c4-8552-e407123a44e7" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3298", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3298" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29293?format=api", "purl": "pkg:pypi/rdiffweb@2.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8" } ], "aliases": [ "CVE-2022-3298", "GHSA-xhw9-4wqq-x67v", "PYSEC-2022-294" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-29xz-5wxu-ybed" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36558?format=api", "vulnerability_id": "VCID-52wf-fheq-cuer", "summary": "Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.", "references": [ { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/06f89b43469aae70e8833e55192721523f86c5a2", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/06f89b43469aae70e8833e55192721523f86c5a2" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2023-186.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2023-186.yaml" }, { "reference_url": "https://huntr.dev/bounties/8d0e0804-d3fd-49fe-bfa4-7a91135767ce", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/8d0e0804-d3fd-49fe-bfa4-7a91135767ce" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5289", "reference_id": "CVE-2023-5289", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-5289" }, { "reference_url": "https://github.com/advisories/GHSA-c4rv-2j6x-pq7x", "reference_id": "GHSA-c4rv-2j6x-pq7x", "reference_type": "", "scores": [], "url": "https://github.com/advisories/GHSA-c4rv-2j6x-pq7x" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/36165?format=api", "purl": "pkg:pypi/rdiffweb@2.8.4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.8.4" } ], "aliases": [ "CVE-2023-5289", "GHSA-c4rv-2j6x-pq7x", "PYSEC-2023-186" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-52wf-fheq-cuer" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36340?format=api", "vulnerability_id": "VCID-57wc-s2nn-cyeu", "summary": "Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4646", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00047", "scoring_system": "epss", "scoring_elements": "0.14751", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4646" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/e6f0d8002129be90fe82fa3e3ea0a6942caba398", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/e6f0d8002129be90fe82fa3e3ea0a6942caba398" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43004.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43004.yaml" }, { "reference_url": "https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4646", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4646" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/30418?format=api", "purl": "pkg:pypi/rdiffweb@2.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.4" } ], "aliases": [ "CVE-2022-4646", "GHSA-85fp-523q-5xwc", "PYSEC-2022-43004" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-57wc-s2nn-cyeu" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36203?format=api", "vulnerability_id": "VCID-5922-k3p7-pfdj", "summary": "Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3221", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00192", "scoring_system": "epss", "scoring_elements": "0.4092", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3221" }, { "reference_url": "https://github.com/advisories/GHSA-vq4h-xrwc-m639", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-vq4h-xrwc-m639" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/9125f5a2d918fed0f3fc1c86fa94cd1779ed9f73", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/9125f5a2d918fed0f3fc1c86fa94cd1779ed9f73" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-278.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-278.yaml" }, { "reference_url": "https://huntr.dev/bounties/1fa1aac9-b16a-4a70-a7da-960b3908ae1d", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/1fa1aac9-b16a-4a70-a7da-960b3908ae1d" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3221", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3221" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29286?format=api", "purl": "pkg:pypi/rdiffweb@2.4.3", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-fxxn-nnzy-97bv" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-pva4-gkpj-juh8" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tjr6-1mzd-93ee" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-z43n-dk6v-pffh" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.3" } ], "aliases": [ "CVE-2022-3221", "GHSA-vq4h-xrwc-m639", "PYSEC-2022-278" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5922-k3p7-pfdj" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36312?format=api", "vulnerability_id": "VCID-5xg7-u3nr-nkfg", "summary": "Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3362", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00358", "scoring_system": "epss", "scoring_elements": "0.58304", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3362" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/6efb995bc32c8a8e9ad755eb813dec991dffb2b8", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/6efb995bc32c8a8e9ad755eb813dec991dffb2b8" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43000.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43000.yaml" }, { "reference_url": "https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3362", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3362" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29472?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0" } ], "aliases": [ "CVE-2022-3362", "GHSA-94qm-99qc-qwqj", "PYSEC-2022-43000" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-5xg7-u3nr-nkfg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36347?format=api", "vulnerability_id": "VCID-6zc1-xs64-1bc6", "summary": "Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4724", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00248", "scoring_system": "epss", "scoring_elements": "0.4824", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4724" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/c4a19cf67d575c4886171b8efcbf4675d51f3929", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/c4a19cf67d575c4886171b8efcbf4675d51f3929" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43010.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43010.yaml" }, { "reference_url": "https://huntr.dev/bounties/e6fb1931-8d9c-4895-be4a-59839b4b6445", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/e6fb1931-8d9c-4895-be4a-59839b4b6445" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4724", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4724" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/31062?format=api", "purl": "pkg:pypi/rdiffweb@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-52wf-fheq-cuer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5" } ], "aliases": [ "CVE-2022-4724", "GHSA-m8r9-qxx8-mrxp", "PYSEC-2022-43010" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6zc1-xs64-1bc6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36195?format=api", "vulnerability_id": "VCID-91jt-tgps-27b2", "summary": "Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3175", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00232", "scoring_system": "epss", "scoring_elements": "0.46172", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3175" }, { "reference_url": "https://github.com/advisories/GHSA-ch4c-278q-5654", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-ch4c-278q-5654" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/blob/4d1232cd0586eb79d1a921969f8f7a198a00d92b/README.md?plain=1#L149", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/blob/4d1232cd0586eb79d1a921969f8f7a198a00d92b/README.md?plain=1#L149" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-273.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-273.yaml" }, { "reference_url": "https://huntr.dev/bounties/c40badc3-c9e7-4b69-9e2e-2b9f05865159", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/c40badc3-c9e7-4b69-9e2e-2b9f05865159" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3175", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3175" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29278?format=api", "purl": "pkg:pypi/rdiffweb@2.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5922-k3p7-pfdj" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-fxxn-nnzy-97bv" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-pva4-gkpj-juh8" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tjr6-1mzd-93ee" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-z43n-dk6v-pffh" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2" } ], "aliases": [ "CVE-2022-3175", "GHSA-ch4c-278q-5654", "PYSEC-2022-273" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-91jt-tgps-27b2" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36314?format=api", "vulnerability_id": "VCID-9f5c-ne9b-27fd", "summary": "Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4018", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00422", "scoring_system": "epss", "scoring_elements": "0.62394", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4018" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "value": "2.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "value": "2.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43001.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "value": "2.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43001.yaml" }, { "reference_url": "https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "value": "2.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4018", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L" }, { "value": "2.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P" }, { "value": "LOW", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4018" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29462?format=api", "purl": "pkg:pypi/rdiffweb@2.4.11a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/148752?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0a6", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a6" } ], "aliases": [ "CVE-2022-4018", "GHSA-4wph-9vrm-6v3w", "PYSEC-2022-43001" ], "risk_score": 1.9, "exploitability": "0.5", "weighted_severity": "3.9", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-9f5c-ne9b-27fd" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36244?format=api", "vulnerability_id": "VCID-dpbu-gy6u-abd3", "summary": "Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3272", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00433", "scoring_system": "epss", "scoring_elements": "0.63035", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3272" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-291.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-291.yaml" }, { "reference_url": "https://huntr.com/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.com/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38" }, { "reference_url": "https://huntr.dev/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38", "reference_id": "", "reference_type": "", "scores": [], "url": "https://huntr.dev/bounties/733678b9-daa1-4d6a-875a-382fa09a6e38" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3272", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3272" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29293?format=api", "purl": "pkg:pypi/rdiffweb@2.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8" } ], "aliases": [ "CVE-2022-3272", "GHSA-qrj3-hrgj-fm7r", "PYSEC-2022-291" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-dpbu-gy6u-abd3" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36196?format=api", "vulnerability_id": "VCID-e351-976k-sqak", "summary": "Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3179", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00287", "scoring_system": "epss", "scoring_elements": "0.52375", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3179" }, { "reference_url": "https://github.com/advisories/GHSA-mp5p-g2jv-r8qw", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-mp5p-g2jv-r8qw" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-272.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-272.yaml" }, { "reference_url": "https://huntr.dev/bounties/58eae29e-3619-449d-9bba-fdcbabcba5fe", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/58eae29e-3619-449d-9bba-fdcbabcba5fe" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3179", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3179" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29278?format=api", "purl": "pkg:pypi/rdiffweb@2.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5922-k3p7-pfdj" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-fxxn-nnzy-97bv" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-pva4-gkpj-juh8" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tjr6-1mzd-93ee" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-z43n-dk6v-pffh" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2" } ], "aliases": [ "CVE-2022-3179", "GHSA-mp5p-g2jv-r8qw", "PYSEC-2022-272" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-e351-976k-sqak" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36351?format=api", "vulnerability_id": "VCID-ep38-eu98-fbas", "summary": "Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4721", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00339", "scoring_system": "epss", "scoring_elements": "0.5693", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4721" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078d" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43007.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43007.yaml" }, { "reference_url": "https://huntr.dev/bounties/3c48ef5d-da4d-4ee4-aaca-af65e7273720", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/3c48ef5d-da4d-4ee4-aaca-af65e7273720" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4721", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4721" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/31062?format=api", "purl": "pkg:pypi/rdiffweb@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-52wf-fheq-cuer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5" } ], "aliases": [ "CVE-2022-4721", "GHSA-83pm-7v48-5jp4", "PYSEC-2022-43007" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ep38-eu98-fbas" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36279?format=api", "vulnerability_id": "VCID-fcym-y8c1-xqdq", "summary": "Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3457", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0022", "scoring_system": "epss", "scoring_elements": "0.44661", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3457" }, { "reference_url": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/afc1bdfab5161c74012ff2590a6ec49cc0d8fde0", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/afc1bdfab5161c74012ff2590a6ec49cc0d8fde0" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43161.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43161.yaml" }, { "reference_url": "https://huntr.dev/bounties/cfcab02e-d6ad-4dcf-b1b0-da90434bc55b", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/cfcab02e-d6ad-4dcf-b1b0-da90434bc55b" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3457", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3457" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/145117?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0a5", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a5" }, { "url": "http://public2.vulnerablecode.io/api/packages/29472?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0" } ], "aliases": [ "CVE-2022-3457", "GHSA-824x-jcxf-hpfg", "PYSEC-2022-43161" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fcym-y8c1-xqdq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36204?format=api", "vulnerability_id": "VCID-fxxn-nnzy-97bv", "summary": "Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3232", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00111", "scoring_system": "epss", "scoring_elements": "0.2917", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3232" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-281.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-281.yaml" }, { "reference_url": "https://huntr.dev/bounties/15c8fd98-7f50-4d46-b013-42710af1f99c", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/15c8fd98-7f50-4d46-b013-42710af1f99c" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3232", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3232" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29288?format=api", "purl": "pkg:pypi/rdiffweb@2.4.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-pva4-gkpj-juh8" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tjr6-1mzd-93ee" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-z43n-dk6v-pffh" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.5" } ], "aliases": [ "CVE-2022-3232", "GHSA-cw2v-wv4g-w4p6", "PYSEC-2022-281" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-fxxn-nnzy-97bv" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36350?format=api", "vulnerability_id": "VCID-h6v3-24fq-3udw", "summary": "Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4723", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00236", "scoring_system": "epss", "scoring_elements": "0.46614", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4723" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/6e9ee210548f6d3210704cac302cfc7cdb239765", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/6e9ee210548f6d3210704cac302cfc7cdb239765" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43009.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43009.yaml" }, { "reference_url": "https://huntr.dev/bounties/9369681b-8bfc-4146-a54c-c5108442d92c", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/9369681b-8bfc-4146-a54c-c5108442d92c" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4723", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4723" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/31062?format=api", "purl": "pkg:pypi/rdiffweb@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-52wf-fheq-cuer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5" } ], "aliases": [ "CVE-2022-4723", "GHSA-7q4r-x5qg-mmcp", "PYSEC-2022-43009" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-h6v3-24fq-3udw" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36191?format=api", "vulnerability_id": "VCID-khum-ewzn-yfe6", "summary": "Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3167", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00395", "scoring_system": "epss", "scoring_elements": "0.6066", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3167" }, { "reference_url": "https://github.com/advisories/GHSA-m379-x4xc-38x9", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-m379-x4xc-38x9" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/7294bb7466532762c93d711211e5958940c1b428", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/7294bb7466532762c93d711211e5958940c1b428" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-268.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-268.yaml" }, { "reference_url": "https://huntr.dev/bounties/e5c2625b-34cc-4805-8223-80f2689e4e5c", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/e5c2625b-34cc-4805-8223-80f2689e4e5c" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3167", "reference_id": "", "reference_type": "", "scores": [ { "value": "8.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3167" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29269?format=api", "purl": "pkg:pypi/rdiffweb@2.4.1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5922-k3p7-pfdj" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-91jt-tgps-27b2" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-e351-976k-sqak" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-fxxn-nnzy-97bv" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-n9ht-12n5-b7c9" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-pva4-gkpj-juh8" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tjr6-1mzd-93ee" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-z43n-dk6v-pffh" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.1" } ], "aliases": [ "CVE-2022-3167", "GHSA-m379-x4xc-38x9", "PYSEC-2022-268" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-khum-ewzn-yfe6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36243?format=api", "vulnerability_id": "VCID-mr71-9e9c-zbda", "summary": "Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3295", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00334", "scoring_system": "epss", "scoring_elements": "0.5655", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3295" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-293.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-293.yaml" }, { "reference_url": "https://huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3295", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3295" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29293?format=api", "purl": "pkg:pypi/rdiffweb@2.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8" } ], "aliases": [ "CVE-2022-3295", "GHSA-hrj7-f62f-j7x7", "PYSEC-2022-293" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-mr71-9e9c-zbda" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36259?format=api", "vulnerability_id": "VCID-n88y-9qre-n3bz", "summary": "Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3438", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00314", "scoring_system": "epss", "scoring_elements": "0.5484", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3438" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/4d464b467f14b8eb9103d7f5f0774e49995527c7", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/4d464b467f14b8eb9103d7f5f0774e49995527c7" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43158.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43158.yaml" }, { "reference_url": "https://huntr.dev/bounties/bc5689e4-221a-4200-a8ab-42c659f89f67", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/bc5689e4-221a-4200-a8ab-42c659f89f67" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3438", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3438" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/144524?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0a4", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a4" }, { "url": "http://public2.vulnerablecode.io/api/packages/29472?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0" } ], "aliases": [ "CVE-2022-3438", "GHSA-8g9m-vv69-7j99", "PYSEC-2022-43158" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n88y-9qre-n3bz" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36194?format=api", "vulnerability_id": "VCID-n9ht-12n5-b7c9", "summary": "Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3174", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00183", "scoring_system": "epss", "scoring_elements": "0.39763", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3174" }, { "reference_url": "https://github.com/advisories/GHSA-mjw4-xvx6-3grg", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-mjw4-xvx6-3grg" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/f2de2371c5e13ce1c6fd6f9a1ed3e5d46b93cd7e", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/f2de2371c5e13ce1c6fd6f9a1ed3e5d46b93cd7e" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-271.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-271.yaml" }, { "reference_url": "https://huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3174", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" }, { "value": "7.1", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3174" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29278?format=api", "purl": "pkg:pypi/rdiffweb@2.4.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5922-k3p7-pfdj" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-fxxn-nnzy-97bv" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-pva4-gkpj-juh8" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tjr6-1mzd-93ee" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-z43n-dk6v-pffh" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.2" } ], "aliases": [ "CVE-2022-3174", "GHSA-mjw4-xvx6-3grg", "PYSEC-2022-271" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-n9ht-12n5-b7c9" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36242?format=api", "vulnerability_id": "VCID-nc4e-1muy-1kd7", "summary": "Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3301", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00267", "scoring_system": "epss", "scoring_elements": "0.50385", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3301" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-295.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-295.yaml" }, { "reference_url": "https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3301", "reference_id": "", "reference_type": "", "scores": [ { "value": "2.4", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N" }, { "value": "4.8", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3301" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29293?format=api", "purl": "pkg:pypi/rdiffweb@2.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8" } ], "aliases": [ "CVE-2022-3301", "GHSA-qq29-5vjh-vxwr", "PYSEC-2022-295" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-nc4e-1muy-1kd7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36287?format=api", "vulnerability_id": "VCID-ps4e-cg34-wyah", "summary": "Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3363", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00492", "scoring_system": "epss", "scoring_elements": "0.65997", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3363" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/c27c46bac656b1da74f28eac1b52dfa5df76e6f2", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/c27c46bac656b1da74f28eac1b52dfa5df76e6f2" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42978.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42978.yaml" }, { "reference_url": "https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3363", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3363" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29469?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0a7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a7" }, { "url": "http://public2.vulnerablecode.io/api/packages/29472?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0" } ], "aliases": [ "CVE-2022-3363", "GHSA-jw36-mrvg-j5fx", "PYSEC-2022-42978" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-ps4e-cg34-wyah" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36236?format=api", "vulnerability_id": "VCID-pva4-gkpj-juh8", "summary": "Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3250", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00371", "scoring_system": "epss", "scoring_elements": "0.59196", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3250" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/ac334dd27ceadac0661b1e2e059a8423433c3fee", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/ac334dd27ceadac0661b1e2e059a8423433c3fee" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-287.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-287.yaml" }, { "reference_url": "https://huntr.dev/bounties/39889a3f-8bb7-448a-b0d4-a18c671bbd23", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/39889a3f-8bb7-448a-b0d4-a18c671bbd23" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3250", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3250" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29290?format=api", "purl": "pkg:pypi/rdiffweb@2.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6" } ], "aliases": [ "CVE-2022-3250", "GHSA-m748-hjqg-rpp8", "PYSEC-2022-287" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-pva4-gkpj-juh8" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36346?format=api", "vulnerability_id": "VCID-qcsd-5htt-h3ev", "summary": "Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4722", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00164", "scoring_system": "epss", "scoring_elements": "0.37055", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4722" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/d1aaa96b665a39fba9e98d6054a9de511ba0a837", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/d1aaa96b665a39fba9e98d6054a9de511ba0a837" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43008.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43008.yaml" }, { "reference_url": "https://huntr.dev/bounties/c62126dc-d9a6-4d3e-988d-967031876c58", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/c62126dc-d9a6-4d3e-988d-967031876c58" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4722", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.2", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H" }, { "value": "8.6", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4722" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/31062?format=api", "purl": "pkg:pypi/rdiffweb@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-52wf-fheq-cuer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5" } ], "aliases": [ "CVE-2022-4722", "GHSA-wf33-6x33-wcf9", "PYSEC-2022-43008" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qcsd-5htt-h3ev" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36280?format=api", "vulnerability_id": "VCID-rynh-v7q5-6kdg", "summary": "Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3439", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00509", "scoring_system": "epss", "scoring_elements": "0.66698", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3439" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43159.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43159.yaml" }, { "reference_url": "https://huntr.dev/bounties/37b86c45-b240-4626-bd53-b6f02d10e0d7", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/37b86c45-b240-4626-bd53-b6f02d10e0d7" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3439", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3439" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29472?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0" } ], "aliases": [ "CVE-2022-3439", "GHSA-x8x2-wc2h-wc48", "PYSEC-2022-43159" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-rynh-v7q5-6kdg" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36257?format=api", "vulnerability_id": "VCID-sn4z-f439-6qe7", "summary": "Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3376", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00489", "scoring_system": "epss", "scoring_elements": "0.65843", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3376" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/2ffc2af65c8f8113b06e0b89929c604bcdf844b9", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/2ffc2af65c8f8113b06e0b89929c604bcdf844b9" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43157.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43157.yaml" }, { "reference_url": "https://huntr.dev/bounties/a9021e93-6d18-4ac1-98ce-550c4697a4ed", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/a9021e93-6d18-4ac1-98ce-550c4697a4ed" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3376", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3376" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29462?format=api", "purl": "pkg:pypi/rdiffweb@2.4.11a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/29472?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0" } ], "aliases": [ "CVE-2022-3376", "GHSA-7wr6-fj4x-893v", "PYSEC-2022-43157" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-sn4z-f439-6qe7" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36240?format=api", "vulnerability_id": "VCID-t1sj-158f-efey", "summary": "Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3269", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00357", "scoring_system": "epss", "scoring_elements": "0.58201", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3269" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/39e7dcd4a1f44d2a7bd92b79d78a800910b1b22b", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/39e7dcd4a1f44d2a7bd92b79d78a800910b1b22b" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-290.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-290.yaml" }, { "reference_url": "https://huntr.dev/bounties/67c25969-5e7a-4424-817e-e1a918f63cc6", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/67c25969-5e7a-4424-817e-e1a918f63cc6" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3269", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3269" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29291?format=api", "purl": "pkg:pypi/rdiffweb@2.4.7", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.7" } ], "aliases": [ "CVE-2022-3269", "GHSA-j3q4-gmj4-mj95", "PYSEC-2022-290" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-t1sj-158f-efey" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36237?format=api", "vulnerability_id": "VCID-tjr6-1mzd-93ee", "summary": "Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3233", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0013", "scoring_system": "epss", "scoring_elements": "0.32055", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3233" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/18a5aabd48fa6d2d2771a25f95610c28a1a097ca", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/18a5aabd48fa6d2d2771a25f95610c28a1a097ca" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-285.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-285.yaml" }, { "reference_url": "https://huntr.dev/bounties/5ec206e0-eca0-4957-9af4-fdd9185d1db3", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/5ec206e0-eca0-4957-9af4-fdd9185d1db3" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3233", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3233" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29290?format=api", "purl": "pkg:pypi/rdiffweb@2.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6" } ], "aliases": [ "CVE-2022-3233", "GHSA-9vxf-mcm6-5m42", "PYSEC-2022-285" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tjr6-1mzd-93ee" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36339?format=api", "vulnerability_id": "VCID-tv4c-g8r6-xbf6", "summary": "Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4644", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00185", "scoring_system": "epss", "scoring_elements": "0.3994", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4644" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/5f861670ef8f38ca8eea52a98672d0e0fabb5368", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/5f861670ef8f38ca8eea52a98672d0e0fabb5368" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43003.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43003.yaml" }, { "reference_url": "https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4644", "reference_id": "", "reference_type": "", "scores": [ { "value": "6.1", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4644" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/30418?format=api", "purl": "pkg:pypi/rdiffweb@2.5.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.4" } ], "aliases": [ "CVE-2022-4644", "GHSA-639f-hxcv-84mc", "PYSEC-2022-43003" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-tv4c-g8r6-xbf6" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36245?format=api", "vulnerability_id": "VCID-vmrb-sm2h-hqf1", "summary": "Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3290", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00299", "scoring_system": "epss", "scoring_elements": "0.53557", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3290" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-292.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-292.yaml" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43184.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43184.yaml" }, { "reference_url": "https://huntr.dev/bounties/d8b8519d-96a5-484c-8141-624c54290bf5", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/d8b8519d-96a5-484c-8141-624c54290bf5" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3290", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.5", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" }, { "value": "8.7", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3290" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29293?format=api", "purl": "pkg:pypi/rdiffweb@2.4.8", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8" } ], "aliases": [ "CVE-2022-3290", "GHSA-5v95-j4rr-6f3c", "PYSEC-2022-292", "PYSEC-2022-43184" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-vmrb-sm2h-hqf1" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36348?format=api", "vulnerability_id": "VCID-wyn5-w4qh-nfht", "summary": "Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4719", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00422", "scoring_system": "epss", "scoring_elements": "0.62394", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-4719" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43005.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43005.yaml" }, { "reference_url": "https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4719", "reference_id": "", "reference_type": "", "scores": [ { "value": "5.7", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L" }, { "value": "6.9", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-4719" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/31062?format=api", "purl": "pkg:pypi/rdiffweb@2.5.5", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-52wf-fheq-cuer" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.5" } ], "aliases": [ "CVE-2022-4719", "GHSA-2wpw-cm9w-v4xm", "PYSEC-2022-43005" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-wyn5-w4qh-nfht" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36278?format=api", "vulnerability_id": "VCID-yssm-eyx3-efhs", "summary": "Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3456", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00316", "scoring_system": "epss", "scoring_elements": "0.54954", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3456" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43160.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43160.yaml" }, { "reference_url": "https://huntr.dev/bounties/b34412ca-50c5-4615-b7e3-5d07d33acfce", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/b34412ca-50c5-4615-b7e3-5d07d33acfce" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3456", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3456" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29472?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0" } ], "aliases": [ "CVE-2022-3456", "GHSA-92gf-p376-6r9r", "PYSEC-2022-43160" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yssm-eyx3-efhs" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36283?format=api", "vulnerability_id": "VCID-yz9x-nz9u-wybe", "summary": "Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3327", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.0033", "scoring_system": "epss", "scoring_elements": "0.5622", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3327" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42977.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42977.yaml" }, { "reference_url": "https://gitlab.com/ikus-soft/rdiffweb#next-release-250", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://gitlab.com/ikus-soft/rdiffweb#next-release-250" }, { "reference_url": "https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3327", "reference_id": "", "reference_type": "", "scores": [ { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "9.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N" }, { "value": "CRITICAL", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3327" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29295?format=api", "purl": "pkg:pypi/rdiffweb@2.4.10", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10" }, { "url": "http://public2.vulnerablecode.io/api/packages/29472?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0" } ], "aliases": [ "CVE-2022-3327", "GHSA-99j5-fvg3-54pm", "PYSEC-2022-42977" ], "risk_score": 4.5, "exploitability": "0.5", "weighted_severity": "9.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yz9x-nz9u-wybe" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36238?format=api", "vulnerability_id": "VCID-z43n-dk6v-pffh", "summary": "Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3267", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00169", "scoring_system": "epss", "scoring_elements": "0.37825", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3267" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/20fc0d304412cc569b21f31e52cb8b94094d6314", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/20fc0d304412cc569b21f31e52cb8b94094d6314" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-284.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-284.yaml" }, { "reference_url": "https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3267", "reference_id": "", "reference_type": "", "scores": [ { "value": "4.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N" }, { "value": "5.3", "scoring_system": "cvssv4", "scoring_elements": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N" }, { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3267" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29290?format=api", "purl": "pkg:pypi/rdiffweb@2.4.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-1fg8-rcx8-77fq" }, { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-29xz-5wxu-ybed" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-9f5c-ne9b-27fd" }, { "vulnerability": "VCID-dpbu-gy6u-abd3" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-mr71-9e9c-zbda" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-nc4e-1muy-1kd7" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-sn4z-f439-6qe7" }, { "vulnerability": "VCID-t1sj-158f-efey" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-vmrb-sm2h-hqf1" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" }, { "vulnerability": "VCID-yz9x-nz9u-wybe" }, { "vulnerability": "VCID-zzjz-9wv2-vfcc" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6" } ], "aliases": [ "CVE-2022-3267", "GHSA-74j6-3hh4-w3f5", "PYSEC-2022-284" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-z43n-dk6v-pffh" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/36256?format=api", "vulnerability_id": "VCID-zzjz-9wv2-vfcc", "summary": "Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.", "references": [ { "reference_url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3273", "reference_id": "", "reference_type": "", "scores": [ { "value": "0.00198", "scoring_system": "epss", "scoring_elements": "0.41775", "published_at": "2026-06-04T12:55:00Z" } ], "url": "https://api.first.org/data/v1/epss?cve=CVE-2022-3273" }, { "reference_url": "https://github.com/ikus060/rdiffweb", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb" }, { "reference_url": "https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/ikus060/rdiffweb/commit/b5e3bb0a98268d18ceead36ab9b2b7eaacd659a8" }, { "reference_url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43156.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43156.yaml" }, { "reference_url": "https://huntr.dev/bounties/a6df4bad-3382-4add-8918-760d885690f6", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "9.8", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://huntr.dev/bounties/a6df4bad-3382-4add-8918-760d885690f6" }, { "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3273", "reference_id": "", "reference_type": "", "scores": [ { "value": "7.3", "scoring_system": "cvssv3.1", "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L" }, { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-3273" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/29462?format=api", "purl": "pkg:pypi/rdiffweb@2.4.11a1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-5xg7-u3nr-nkfg" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-fcym-y8c1-xqdq" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-n88y-9qre-n3bz" }, { "vulnerability": "VCID-ps4e-cg34-wyah" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-rynh-v7q5-6kdg" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" }, { "vulnerability": "VCID-yssm-eyx3-efhs" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1" }, { "url": "http://public2.vulnerablecode.io/api/packages/29472?format=api", "purl": "pkg:pypi/rdiffweb@2.5.0", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-25yw-5nru-aygm" }, { "vulnerability": "VCID-287j-23ju-9fhk" }, { "vulnerability": "VCID-52wf-fheq-cuer" }, { "vulnerability": "VCID-57wc-s2nn-cyeu" }, { "vulnerability": "VCID-6zc1-xs64-1bc6" }, { "vulnerability": "VCID-ep38-eu98-fbas" }, { "vulnerability": "VCID-h6v3-24fq-3udw" }, { "vulnerability": "VCID-qcsd-5htt-h3ev" }, { "vulnerability": "VCID-tv4c-g8r6-xbf6" }, { "vulnerability": "VCID-wyn5-w4qh-nfht" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0" } ], "aliases": [ "CVE-2022-3273", "GHSA-9g3v-v24q-jj5p", "PYSEC-2022-43156" ], "risk_score": 4.4, "exploitability": "0.5", "weighted_severity": "8.8", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zzjz-9wv2-vfcc" } ], "fixing_vulnerabilities": [], "risk_score": "4.5", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.3.6" }