Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-3274

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-gmj8-84r4-h46j

rdiffweb Cross-Site Request Forgery vulnerability can lead to user email ID being changed rdiffwen prior to version 2.4.7 is vulnerable to Cross-Site Request Forgery (CSRF). An attacker can change a user's email ID. Version 2.4.7 has a fix for this issue.

gitlab/pypi/rdiffweb/CVE-2022-3274

rdiffweb Cross-Site Request Forgery vulnerability can lead to user email ID being changed rdiffwen prior to version 2.4.7 is vulnerable to Cross-Site Request Forgery (CSRF). An attacker can change a user's email ID. Version 2.4.7 has a fix for this issue.

pypa/rdiffweb/PYSEC-2022-289

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.

pysec/PYSEC-2022-289

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.