| 0 |
| url |
VCID-25yw-5nru-aygm |
| vulnerability_id |
VCID-25yw-5nru-aygm |
| summary |
Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L |
|
| 1 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T17:42:41Z/ |
|
|
| url |
https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4314, GHSA-g594-55mp-f6q8, PYSEC-2022-43002
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-25yw-5nru-aygm |
|
| 1 |
| url |
VCID-287j-23ju-9fhk |
| vulnerability_id |
VCID-287j-23ju-9fhk |
| summary |
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.2 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L |
|
| 1 |
| value |
8.8 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L |
|
| 1 |
| value |
8.2 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L |
|
| 2 |
| value |
8.8 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:48:42Z/ |
|
|
| url |
https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4720, GHSA-h5wp-jrqc-cwwx, PYSEC-2022-43006
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-287j-23ju-9fhk |
|
| 2 |
| url |
VCID-52wf-fheq-cuer |
| vulnerability_id |
VCID-52wf-fheq-cuer |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/8d0e0804-d3fd-49fe-bfa4-7a91135767ce |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.1 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H |
|
| 1 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-23T17:12:56Z/ |
|
|
| url |
https://huntr.dev/bounties/8d0e0804-d3fd-49fe-bfa4-7a91135767ce |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2023-5289, GHSA-c4rv-2j6x-pq7x, PYSEC-2023-186
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-52wf-fheq-cuer |
|
| 3 |
| url |
VCID-57wc-s2nn-cyeu |
| vulnerability_id |
VCID-57wc-s2nn-cyeu |
| summary |
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
7.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
|
| 1 |
| value |
6.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
|
| 2 |
| value |
7.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T18:19:10Z/ |
|
|
| url |
https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4646, GHSA-85fp-523q-5xwc, PYSEC-2022-43004
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-57wc-s2nn-cyeu |
|
| 4 |
|
| 5 |
| url |
VCID-5xg7-u3nr-nkfg |
| vulnerability_id |
VCID-5xg7-u3nr-nkfg |
| summary |
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
8.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track* |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-30T17:48:18Z/ |
|
|
| url |
https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.5.0 |
| purl |
pkg:pypi/rdiffweb@2.5.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 7 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 8 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 9 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 10 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0 |
|
|
| aliases |
CVE-2022-3362, GHSA-94qm-99qc-qwqj, PYSEC-2022-43000
|
| risk_score |
4.4 |
| exploitability |
0.5 |
| weighted_severity |
8.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5xg7-u3nr-nkfg |
|
| 6 |
| url |
VCID-6zc1-xs64-1bc6 |
| vulnerability_id |
VCID-6zc1-xs64-1bc6 |
| summary |
Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/e6fb1931-8d9c-4895-be4a-59839b4b6445 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.4 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:16:04Z/ |
|
|
| url |
https://huntr.dev/bounties/e6fb1931-8d9c-4895-be4a-59839b4b6445 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4724, GHSA-m8r9-qxx8-mrxp, PYSEC-2022-43010
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6zc1-xs64-1bc6 |
|
| 7 |
| url |
VCID-9f5c-ne9b-27fd |
| vulnerability_id |
VCID-9f5c-ne9b-27fd |
| summary |
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |
|
| 1 |
| value |
2.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P |
|
| 2 |
| value |
LOW |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
4.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |
|
| 2 |
| value |
2.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P |
|
| 3 |
| value |
LOW |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T18:19:15Z/ |
|
|
| url |
https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.11a1 |
| purl |
pkg:pypi/rdiffweb@2.4.11a1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 8 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 9 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 10 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 11 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 12 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 13 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 14 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 15 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 16 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 17 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1 |
|
| 1 |
|
| 2 |
| url |
pkg:pypi/rdiffweb@2.5.0a7 |
| purl |
pkg:pypi/rdiffweb@2.5.0a7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 9 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 10 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 11 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 12 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 13 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 14 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 15 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 16 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a7 |
|
|
| aliases |
CVE-2022-4018, GHSA-4wph-9vrm-6v3w, PYSEC-2022-43001
|
| risk_score |
1.9 |
| exploitability |
0.5 |
| weighted_severity |
3.9 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9f5c-ne9b-27fd |
|
| 8 |
| url |
VCID-btgq-2yaz-abdd |
| vulnerability_id |
VCID-btgq-2yaz-abdd |
| summary |
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/1f6a5e49-23f2-45f7-8661-19f9cee8ae97 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.4 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
|
| 1 |
| value |
5.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
|
| 2 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-20T20:22:21Z/ |
|
|
| url |
https://huntr.dev/bounties/1f6a5e49-23f2-45f7-8661-19f9cee8ae97 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.9 |
| purl |
pkg:pypi/rdiffweb@2.4.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 8 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 9 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 10 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 11 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 12 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 13 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 14 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 15 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 16 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 17 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 18 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 19 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 20 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 21 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 22 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 23 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.9 |
|
|
| aliases |
CVE-2022-3326, GHSA-8wxf-c45w-g66g, PYSEC-2022-297
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-btgq-2yaz-abdd |
|
| 9 |
| url |
VCID-ep38-eu98-fbas |
| vulnerability_id |
VCID-ep38-eu98-fbas |
| summary |
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/3c48ef5d-da4d-4ee4-aaca-af65e7273720 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.6 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H |
|
| 1 |
| value |
5.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
|
| 2 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:47:29Z/ |
|
|
| url |
https://huntr.dev/bounties/3c48ef5d-da4d-4ee4-aaca-af65e7273720 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4721, GHSA-83pm-7v48-5jp4, PYSEC-2022-43007
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ep38-eu98-fbas |
|
| 10 |
|
| 11 |
| url |
VCID-fdqn-8pt3-2bfz |
| vulnerability_id |
VCID-fdqn-8pt3-2bfz |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/4e8f6136-50c7-4fa1-ac98-699bcb7b35ce |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 2 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:02:31Z/ |
|
|
| url |
https://huntr.dev/bounties/4e8f6136-50c7-4fa1-ac98-699bcb7b35ce |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.10 |
| purl |
pkg:pypi/rdiffweb@2.4.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 8 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 9 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 10 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 11 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 12 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 13 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 14 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 15 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 16 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 17 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 18 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 19 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 20 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10 |
|
| 1 |
|
|
| aliases |
CVE-2022-3371, GHSA-3fhq-72hw-jqwv, PYSEC-2022-299
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fdqn-8pt3-2bfz |
|
| 12 |
| url |
VCID-ffd3-kujb-f7fq |
| vulnerability_id |
VCID-ffd3-kujb-f7fq |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/e70ad507-1424-463b-bdf1-c4a6fbe6e720 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
|
| 2 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:04:28Z/ |
|
|
| url |
https://huntr.dev/bounties/e70ad507-1424-463b-bdf1-c4a6fbe6e720 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.10 |
| purl |
pkg:pypi/rdiffweb@2.4.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 8 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 9 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 10 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 11 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 12 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 13 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 14 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 15 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 16 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 17 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 18 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 19 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 20 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10 |
|
| 1 |
|
|
| aliases |
CVE-2022-3364, GHSA-fqfg-c577-2vc3, PYSEC-2022-298
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ffd3-kujb-f7fq |
|
| 13 |
| url |
VCID-h6v3-24fq-3udw |
| vulnerability_id |
VCID-h6v3-24fq-3udw |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
7.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/9369681b-8bfc-4146-a54c-c5108442d92c |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H |
|
| 1 |
| value |
6.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
|
| 2 |
| value |
7.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:16:53Z/ |
|
|
| url |
https://huntr.dev/bounties/9369681b-8bfc-4146-a54c-c5108442d92c |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4723, GHSA-7q4r-x5qg-mmcp, PYSEC-2022-43009
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-h6v3-24fq-3udw |
|
| 14 |
| url |
VCID-jy4h-rrhr-83ah |
| vulnerability_id |
VCID-jy4h-rrhr-83ah |
| summary |
Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.6 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
|
| 1 |
| value |
5.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/e9309018-e94f-4e15-b7d1-5d38b6021c5d |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
|
| 1 |
| value |
4.6 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
|
| 2 |
| value |
5.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T14:22:00Z/ |
|
|
| url |
https://huntr.dev/bounties/e9309018-e94f-4e15-b7d1-5d38b6021c5d |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.9 |
| purl |
pkg:pypi/rdiffweb@2.4.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 8 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 9 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 10 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 11 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 12 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 13 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 14 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 15 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 16 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 17 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 18 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 19 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 20 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 21 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 22 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 23 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.9 |
|
|
| aliases |
CVE-2022-3292, GHSA-7fqm-jm52-f9vc, PYSEC-2022-296
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jy4h-rrhr-83ah |
|
| 15 |
|
| 16 |
| url |
VCID-nbqy-kang-vfau |
| vulnerability_id |
VCID-nbqy-kang-vfau |
| summary |
Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.10 |
| purl |
pkg:pypi/rdiffweb@2.4.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 8 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 9 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 10 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 11 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 12 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 13 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 14 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 15 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 16 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 17 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 18 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 19 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 20 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10 |
|
|
| aliases |
CVE-2022-3389, GHSA-hrrm-895h-xh34, PYSEC-2022-302
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nbqy-kang-vfau |
|
| 17 |
| url |
VCID-ps4e-cg34-wyah |
| vulnerability_id |
VCID-ps4e-cg34-wyah |
| summary |
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
2.8 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L |
|
| 1 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-07T18:29:00Z/ |
|
|
| url |
https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.5.0a7 |
| purl |
pkg:pypi/rdiffweb@2.5.0a7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 9 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 10 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 11 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 12 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 13 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 14 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 15 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 16 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a7 |
|
| 1 |
| url |
pkg:pypi/rdiffweb@2.5.0 |
| purl |
pkg:pypi/rdiffweb@2.5.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 7 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 8 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 9 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 10 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0 |
|
|
| aliases |
CVE-2022-3363, GHSA-jw36-mrvg-j5fx, PYSEC-2022-42978
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ps4e-cg34-wyah |
|
| 18 |
| url |
VCID-qcsd-5htt-h3ev |
| vulnerability_id |
VCID-qcsd-5htt-h3ev |
| summary |
Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.2 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.6 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/c62126dc-d9a6-4d3e-988d-967031876c58 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.2 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
7.2 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
8.6 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:46:39Z/ |
|
|
| url |
https://huntr.dev/bounties/c62126dc-d9a6-4d3e-988d-967031876c58 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4722, GHSA-wf33-6x33-wcf9, PYSEC-2022-43008
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qcsd-5htt-h3ev |
|
| 19 |
|
| 20 |
| url |
VCID-sn4z-f439-6qe7 |
| vulnerability_id |
VCID-sn4z-f439-6qe7 |
| summary |
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.11a1 |
| purl |
pkg:pypi/rdiffweb@2.4.11a1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 8 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 9 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 10 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 11 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 12 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 13 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 14 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 15 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 16 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 17 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1 |
|
| 1 |
| url |
pkg:pypi/rdiffweb@2.5.0 |
| purl |
pkg:pypi/rdiffweb@2.5.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 7 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 8 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 9 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 10 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0 |
|
|
| aliases |
CVE-2022-3376, GHSA-7wr6-fj4x-893v, PYSEC-2022-43157
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sn4z-f439-6qe7 |
|
| 21 |
| url |
VCID-tv4c-g8r6-xbf6 |
| vulnerability_id |
VCID-tv4c-g8r6-xbf6 |
| summary |
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.9 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L |
|
| 1 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 2 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T18:32:13Z/ |
|
|
| url |
https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4644, GHSA-639f-hxcv-84mc, PYSEC-2022-43003
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tv4c-g8r6-xbf6 |
|
| 22 |
| url |
VCID-wyn5-w4qh-nfht |
| vulnerability_id |
VCID-wyn5-w4qh-nfht |
| summary |
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.7 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.7 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L |
|
| 1 |
| value |
5.7 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L |
|
| 2 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:49:14Z/ |
|
|
| url |
https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4719, GHSA-2wpw-cm9w-v4xm, PYSEC-2022-43005
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wyn5-w4qh-nfht |
|
| 23 |
|
| 24 |
| url |
VCID-yz9x-nz9u-wybe |
| vulnerability_id |
VCID-yz9x-nz9u-wybe |
| summary |
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
| reference_url |
https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.5 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N |
|
| 1 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-09T14:18:37Z/ |
|
|
| url |
https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.10 |
| purl |
pkg:pypi/rdiffweb@2.4.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 8 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 9 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 10 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 11 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 12 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 13 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 14 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 15 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 16 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 17 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 18 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 19 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 20 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10 |
|
| 1 |
| url |
pkg:pypi/rdiffweb@2.5.0 |
| purl |
pkg:pypi/rdiffweb@2.5.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 7 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 8 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 9 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 10 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0 |
|
|
| aliases |
CVE-2022-3327, GHSA-99j5-fvg3-54pm, PYSEC-2022-42977
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-yz9x-nz9u-wybe |
|
| 25 |
| url |
VCID-zzjz-9wv2-vfcc |
| vulnerability_id |
VCID-zzjz-9wv2-vfcc |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. |
| references |
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.11a1 |
| purl |
pkg:pypi/rdiffweb@2.4.11a1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 8 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 9 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 10 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 11 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 12 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 13 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 14 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 15 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 16 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 17 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1 |
|
| 1 |
| url |
pkg:pypi/rdiffweb@2.5.0 |
| purl |
pkg:pypi/rdiffweb@2.5.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 7 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 8 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 9 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 10 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0 |
|
|
| aliases |
CVE-2022-3273, GHSA-9g3v-v24q-jj5p, PYSEC-2022-43156
|
| risk_score |
4.4 |
| exploitability |
0.5 |
| weighted_severity |
8.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zzjz-9wv2-vfcc |
|