Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-4721

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-83pm-7v48-5jp4

rdiffweb vulnerable to Special Element Injection In rdiffweb prior to 2.5.5, lack of sanitisation of characters in SSH key name could allow attacker to inject a hyperlink injection that could allow attacker to redirect victim to malicious websites.

gitlab/pypi/rdiffweb/CVE-2022-4721

rdiffweb vulnerable to Special Element Injection In rdiffweb prior to 2.5.5, lack of sanitisation of characters in SSH key name could allow attacker to inject a hyperlink injection that could allow attacker to redirect victim to malicious websites.

pypa/rdiffweb/PYSEC-2022-43007

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.

pysec/PYSEC-2022-43007

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.