Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-3273

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-9g3v-v24q-jj5p

rdiffweb does not have a rate limit on incorrect password attempts to prevent brute force attacks rdiffweb prior to 2.5.0a4 does not have a rate limit to prevent attackers attempting brute force attacks to guess passwords. Version 2.5.0a4 limits the number of incorrect password attempts.

gitlab/pypi/rdiffweb/CVE-2022-3273

rdiffweb does not have a rate limit on incorrect password attempts to prevent brute force attacks rdiffweb prior to 2.5.0a4 does not have a rate limit to prevent attackers attempting brute force attacks to guess passwords. Version 2.5.0a4 limits the number of incorrect password attempts.

pypa/rdiffweb/PYSEC-2022-43156

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

pysec/PYSEC-2022-43156

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.