Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-3267

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-74j6-3hh4-w3f5

rdiffweb Cross-Site Request Forgery vulnerability rdiffweb prior to 2.4.6 is vulnerable to cross-site request forgery on the repository settings. A malicious user can change the settings of a repository by sending a URL to the victim. This issue is fixed in version 2.4.6.

gitlab/pypi/rdiffweb/CVE-2022-3267

rdiffweb Cross-Site Request Forgery vulnerability rdiffweb prior to 2.4.6 is vulnerable to cross-site request forgery on the repository settings. A malicious user can change the settings of a repository by sending a URL to the victim. This issue is fixed in version 2.4.6.

pypa/rdiffweb/PYSEC-2022-284

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.

pysec/PYSEC-2022-284

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.