| 0 |
| url |
VCID-1fg8-rcx8-77fq |
| vulnerability_id |
VCID-1fg8-rcx8-77fq |
| summary |
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3274 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00683 |
| scoring_system |
epss |
| scoring_elements |
0.72043 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00683 |
| scoring_system |
epss |
| scoring_elements |
0.7208 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00683 |
| scoring_system |
epss |
| scoring_elements |
0.72055 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00683 |
| scoring_system |
epss |
| scoring_elements |
0.72068 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00683 |
| scoring_system |
epss |
| scoring_elements |
0.72091 |
| published_at |
2026-06-06T12:55:00Z |
|
| 5 |
| value |
0.00683 |
| scoring_system |
epss |
| scoring_elements |
0.72083 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3274 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.0 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H |
|
| 1 |
| value |
7.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H |
|
| 1 |
| value |
7.0 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H |
|
| 2 |
| value |
7.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-22T16:00:42Z/ |
|
|
| url |
https://huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.7 |
| purl |
pkg:pypi/rdiffweb@2.4.7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 3 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 4 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 5 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 6 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 7 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 8 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 9 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 10 |
| vulnerability |
VCID-btgq-2yaz-abdd |
|
| 11 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 12 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 13 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 14 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 15 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 16 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 17 |
| vulnerability |
VCID-jy4h-rrhr-83ah |
|
| 18 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 19 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 20 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 21 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 22 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 23 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 24 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 25 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 26 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 27 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 28 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 29 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 30 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 31 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.7 |
|
|
| aliases |
CVE-2022-3274, GHSA-gmj8-84r4-h46j, PYSEC-2022-289
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-1fg8-rcx8-77fq |
|
| 1 |
| url |
VCID-25yw-5nru-aygm |
| vulnerability_id |
VCID-25yw-5nru-aygm |
| summary |
Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4314 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00448 |
| scoring_system |
epss |
| scoring_elements |
0.63913 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00448 |
| scoring_system |
epss |
| scoring_elements |
0.6392 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00448 |
| scoring_system |
epss |
| scoring_elements |
0.63901 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00448 |
| scoring_system |
epss |
| scoring_elements |
0.63873 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00448 |
| scoring_system |
epss |
| scoring_elements |
0.63916 |
| published_at |
2026-06-05T12:55:00Z |
|
| 5 |
| value |
0.00448 |
| scoring_system |
epss |
| scoring_elements |
0.63922 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4314 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:L |
|
| 1 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T17:42:41Z/ |
|
|
| url |
https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.5.2 |
| purl |
pkg:pypi/rdiffweb@2.5.2 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 1 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 2 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 3 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 4 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 5 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 6 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 7 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 8 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 9 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 10 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.2 |
|
|
| aliases |
CVE-2022-4314, GHSA-g594-55mp-f6q8, PYSEC-2022-43002
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-25yw-5nru-aygm |
|
| 2 |
| url |
VCID-287j-23ju-9fhk |
| vulnerability_id |
VCID-287j-23ju-9fhk |
| summary |
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4720 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00136 |
| scoring_system |
epss |
| scoring_elements |
0.33299 |
| published_at |
2026-06-05T12:55:00Z |
|
| 1 |
| value |
0.00136 |
| scoring_system |
epss |
| scoring_elements |
0.33266 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00136 |
| scoring_system |
epss |
| scoring_elements |
0.33246 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00136 |
| scoring_system |
epss |
| scoring_elements |
0.33278 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00136 |
| scoring_system |
epss |
| scoring_elements |
0.33196 |
| published_at |
2026-06-04T12:55:00Z |
|
| 5 |
| value |
0.00136 |
| scoring_system |
epss |
| scoring_elements |
0.33314 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4720 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.2 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L |
|
| 1 |
| value |
8.8 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:L |
|
| 1 |
| value |
8.2 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L |
|
| 2 |
| value |
8.8 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:L/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:48:42Z/ |
|
|
| url |
https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4720, GHSA-h5wp-jrqc-cwwx, PYSEC-2022-43006
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-287j-23ju-9fhk |
|
| 3 |
| url |
VCID-29xz-5wxu-ybed |
| vulnerability_id |
VCID-29xz-5wxu-ybed |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3298 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56601 |
| published_at |
2026-06-09T12:55:00Z |
|
| 1 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.5655 |
| published_at |
2026-06-04T12:55:00Z |
|
| 2 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56603 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56609 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56598 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56583 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3298 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.8 |
| purl |
pkg:pypi/rdiffweb@2.4.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-btgq-2yaz-abdd |
|
| 10 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 11 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 12 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 13 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 14 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 15 |
| vulnerability |
VCID-jy4h-rrhr-83ah |
|
| 16 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 17 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 18 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 19 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 20 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 21 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 22 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 23 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 24 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 25 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 26 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8 |
|
|
| aliases |
CVE-2022-3298, GHSA-xhw9-4wqq-x67v, PYSEC-2022-294
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-29xz-5wxu-ybed |
|
| 4 |
| url |
VCID-2n1n-8nzg-xuh3 |
| vulnerability_id |
VCID-2n1n-8nzg-xuh3 |
| summary |
IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other users
IKUS Rdiffweb version 2.10.5 and below have an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authenticated subject and the targeted user/tenant, so crafted requests can read or modify other users data and, in some cases, perform privileged actions. This issue may enable cross-tenant access. Fixed in version 2.10.6. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2025-67796 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00035 |
| scoring_system |
epss |
| scoring_elements |
0.10539 |
| published_at |
2026-06-08T12:55:00Z |
|
| 1 |
| value |
0.00035 |
| scoring_system |
epss |
| scoring_elements |
0.10561 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00035 |
| scoring_system |
epss |
| scoring_elements |
0.10624 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00035 |
| scoring_system |
epss |
| scoring_elements |
0.10662 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00035 |
| scoring_system |
epss |
| scoring_elements |
0.10638 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2025-67796 |
|
| 1 |
| reference_url |
https://gitlab.com/ikus-soft/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
|
| 1 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 2 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2026-05-05T15:06:50Z/ |
|
|
| url |
https://gitlab.com/ikus-soft/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
|
| fixed_packages |
|
| aliases |
CVE-2025-67796, GHSA-v4gp-hf5j-4566
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-2n1n-8nzg-xuh3 |
|
| 5 |
| url |
VCID-52wf-fheq-cuer |
| vulnerability_id |
VCID-52wf-fheq-cuer |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2023-5289 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00076 |
| scoring_system |
epss |
| scoring_elements |
0.22904 |
| published_at |
2026-06-08T12:55:00Z |
|
| 1 |
| value |
0.00076 |
| scoring_system |
epss |
| scoring_elements |
0.23016 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00076 |
| scoring_system |
epss |
| scoring_elements |
0.22908 |
| published_at |
2026-06-09T12:55:00Z |
|
| 3 |
| value |
0.00076 |
| scoring_system |
epss |
| scoring_elements |
0.22957 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00076 |
| scoring_system |
epss |
| scoring_elements |
0.23001 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2023-5289 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/8d0e0804-d3fd-49fe-bfa4-7a91135767ce |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.1 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H |
|
| 1 |
| value |
8.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2024-09-23T17:12:56Z/ |
|
|
| url |
https://huntr.dev/bounties/8d0e0804-d3fd-49fe-bfa4-7a91135767ce |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2023-5289, GHSA-c4rv-2j6x-pq7x, PYSEC-2023-186
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-52wf-fheq-cuer |
|
| 6 |
| url |
VCID-57wc-s2nn-cyeu |
| vulnerability_id |
VCID-57wc-s2nn-cyeu |
| summary |
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4646 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00047 |
| scoring_system |
epss |
| scoring_elements |
0.14838 |
| published_at |
2026-06-05T12:55:00Z |
|
| 1 |
| value |
0.00047 |
| scoring_system |
epss |
| scoring_elements |
0.1473 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00047 |
| scoring_system |
epss |
| scoring_elements |
0.14709 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00047 |
| scoring_system |
epss |
| scoring_elements |
0.14792 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00047 |
| scoring_system |
epss |
| scoring_elements |
0.14751 |
| published_at |
2026-06-04T12:55:00Z |
|
| 5 |
| value |
0.00047 |
| scoring_system |
epss |
| scoring_elements |
0.14834 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4646 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
7.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
|
| 1 |
| value |
6.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H |
|
| 2 |
| value |
7.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T18:19:10Z/ |
|
|
| url |
https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4646, GHSA-85fp-523q-5xwc, PYSEC-2022-43004
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-57wc-s2nn-cyeu |
|
| 7 |
| url |
VCID-5k13-n5su-sqce |
| vulnerability_id |
VCID-5k13-n5su-sqce |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2023-4138 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00089 |
| scoring_system |
epss |
| scoring_elements |
0.25326 |
| published_at |
2026-06-08T12:55:00Z |
|
| 1 |
| value |
0.00089 |
| scoring_system |
epss |
| scoring_elements |
0.25335 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00089 |
| scoring_system |
epss |
| scoring_elements |
0.25384 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00089 |
| scoring_system |
epss |
| scoring_elements |
0.25432 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00089 |
| scoring_system |
epss |
| scoring_elements |
0.25446 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2023-4138 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
|
| fixed_packages |
|
| aliases |
CVE-2023-4138, GHSA-wwrg-2w5j-grvx
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5k13-n5su-sqce |
|
| 8 |
| url |
VCID-5xg7-u3nr-nkfg |
| vulnerability_id |
VCID-5xg7-u3nr-nkfg |
| summary |
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3362 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00358 |
| scoring_system |
epss |
| scoring_elements |
0.58304 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00358 |
| scoring_system |
epss |
| scoring_elements |
0.5836 |
| published_at |
2026-06-06T12:55:00Z |
|
| 2 |
| value |
0.00358 |
| scoring_system |
epss |
| scoring_elements |
0.58351 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.0041 |
| scoring_system |
epss |
| scoring_elements |
0.61679 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.0041 |
| scoring_system |
epss |
| scoring_elements |
0.61697 |
| published_at |
2026-06-09T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3362 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
8.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track* |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:T/P:M/B:A/M:M/D:R/2025-04-30T17:48:18Z/ |
|
|
| url |
https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.5.0 |
| purl |
pkg:pypi/rdiffweb@2.5.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 9 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 10 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 11 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0 |
|
|
| aliases |
CVE-2022-3362, GHSA-94qm-99qc-qwqj, PYSEC-2022-43000
|
| risk_score |
4.4 |
| exploitability |
0.5 |
| weighted_severity |
8.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-5xg7-u3nr-nkfg |
|
| 9 |
| url |
VCID-6zc1-xs64-1bc6 |
| vulnerability_id |
VCID-6zc1-xs64-1bc6 |
| summary |
Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4724 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00237 |
| scoring_system |
epss |
| scoring_elements |
0.46965 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00237 |
| scoring_system |
epss |
| scoring_elements |
0.46947 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00237 |
| scoring_system |
epss |
| scoring_elements |
0.46937 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00237 |
| scoring_system |
epss |
| scoring_elements |
0.46983 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00248 |
| scoring_system |
epss |
| scoring_elements |
0.48302 |
| published_at |
2026-06-05T12:55:00Z |
|
| 5 |
| value |
0.00248 |
| scoring_system |
epss |
| scoring_elements |
0.4824 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4724 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/e6fb1931-8d9c-4895-be4a-59839b4b6445 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.4 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:16:04Z/ |
|
|
| url |
https://huntr.dev/bounties/e6fb1931-8d9c-4895-be4a-59839b4b6445 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4724, GHSA-m8r9-qxx8-mrxp, PYSEC-2022-43010
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-6zc1-xs64-1bc6 |
|
| 10 |
| url |
VCID-9f5c-ne9b-27fd |
| vulnerability_id |
VCID-9f5c-ne9b-27fd |
| summary |
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4018 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00422 |
| scoring_system |
epss |
| scoring_elements |
0.62394 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00422 |
| scoring_system |
epss |
| scoring_elements |
0.62423 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00422 |
| scoring_system |
epss |
| scoring_elements |
0.62438 |
| published_at |
2026-06-09T12:55:00Z |
|
| 3 |
| value |
0.00422 |
| scoring_system |
epss |
| scoring_elements |
0.62439 |
| published_at |
2026-06-05T12:55:00Z |
|
| 4 |
| value |
0.00422 |
| scoring_system |
epss |
| scoring_elements |
0.62448 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4018 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |
|
| 1 |
| value |
2.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P |
|
| 2 |
| value |
LOW |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
4.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L |
|
| 2 |
| value |
2.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P |
|
| 3 |
| value |
LOW |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-14T18:19:15Z/ |
|
|
| url |
https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.11a1 |
| purl |
pkg:pypi/rdiffweb@2.4.11a1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 10 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 11 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 12 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 13 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 14 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 15 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 16 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 17 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 18 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1 |
|
| 1 |
|
| 2 |
| url |
pkg:pypi/rdiffweb@2.5.0a7 |
| purl |
pkg:pypi/rdiffweb@2.5.0a7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 9 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 10 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 11 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 12 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 13 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 14 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 15 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 16 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 17 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a7 |
|
|
| aliases |
CVE-2022-4018, GHSA-4wph-9vrm-6v3w, PYSEC-2022-43001
|
| risk_score |
2.8 |
| exploitability |
0.5 |
| weighted_severity |
5.5 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-9f5c-ne9b-27fd |
|
| 11 |
| url |
VCID-btgq-2yaz-abdd |
| vulnerability_id |
VCID-btgq-2yaz-abdd |
| summary |
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3326 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40518 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40559 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40545 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40575 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40601 |
| published_at |
2026-06-06T12:55:00Z |
|
| 5 |
| value |
0.00189 |
| scoring_system |
epss |
| scoring_elements |
0.40597 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3326 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/1f6a5e49-23f2-45f7-8661-19f9cee8ae97 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.4 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
|
| 1 |
| value |
5.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
|
| 2 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-20T20:22:21Z/ |
|
|
| url |
https://huntr.dev/bounties/1f6a5e49-23f2-45f7-8661-19f9cee8ae97 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.9 |
| purl |
pkg:pypi/rdiffweb@2.4.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 10 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 11 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 12 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 13 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 14 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 15 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 16 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 17 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 18 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 19 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 20 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 21 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 22 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 23 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 24 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.9 |
|
|
| aliases |
CVE-2022-3326, GHSA-8wxf-c45w-g66g, PYSEC-2022-297
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-btgq-2yaz-abdd |
|
| 12 |
| url |
VCID-dpbu-gy6u-abd3 |
| vulnerability_id |
VCID-dpbu-gy6u-abd3 |
| summary |
Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3272 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.63081 |
| published_at |
2026-06-09T12:55:00Z |
|
| 1 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.63035 |
| published_at |
2026-06-04T12:55:00Z |
|
| 2 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.63079 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.63088 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.63078 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.00433 |
| scoring_system |
epss |
| scoring_elements |
0.63064 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3272 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.8 |
| purl |
pkg:pypi/rdiffweb@2.4.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-btgq-2yaz-abdd |
|
| 10 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 11 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 12 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 13 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 14 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 15 |
| vulnerability |
VCID-jy4h-rrhr-83ah |
|
| 16 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 17 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 18 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 19 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 20 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 21 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 22 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 23 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 24 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 25 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 26 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8 |
|
|
| aliases |
CVE-2022-3272, GHSA-qrj3-hrgj-fm7r, PYSEC-2022-291
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-dpbu-gy6u-abd3 |
|
| 13 |
| url |
VCID-ep38-eu98-fbas |
| vulnerability_id |
VCID-ep38-eu98-fbas |
| summary |
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4721 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32229 |
| published_at |
2026-06-09T12:55:00Z |
|
| 1 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32206 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32236 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00132 |
| scoring_system |
epss |
| scoring_elements |
0.32274 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00339 |
| scoring_system |
epss |
| scoring_elements |
0.56981 |
| published_at |
2026-06-05T12:55:00Z |
|
| 5 |
| value |
0.00339 |
| scoring_system |
epss |
| scoring_elements |
0.5693 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4721 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/3c48ef5d-da4d-4ee4-aaca-af65e7273720 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.6 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H |
|
| 1 |
| value |
5.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N |
|
| 2 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:47:29Z/ |
|
|
| url |
https://huntr.dev/bounties/3c48ef5d-da4d-4ee4-aaca-af65e7273720 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4721, GHSA-83pm-7v48-5jp4, PYSEC-2022-43007
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ep38-eu98-fbas |
|
| 14 |
| url |
VCID-fcym-y8c1-xqdq |
| vulnerability_id |
VCID-fcym-y8c1-xqdq |
| summary |
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3457 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0022 |
| scoring_system |
epss |
| scoring_elements |
0.44661 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.0022 |
| scoring_system |
epss |
| scoring_elements |
0.44698 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.0022 |
| scoring_system |
epss |
| scoring_elements |
0.44685 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.0022 |
| scoring_system |
epss |
| scoring_elements |
0.44716 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.0022 |
| scoring_system |
epss |
| scoring_elements |
0.44738 |
| published_at |
2026-06-06T12:55:00Z |
|
| 5 |
| value |
0.0022 |
| scoring_system |
epss |
| scoring_elements |
0.4473 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3457 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
| 0 |
|
| 1 |
| url |
pkg:pypi/rdiffweb@2.5.0 |
| purl |
pkg:pypi/rdiffweb@2.5.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 9 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 10 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 11 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0 |
|
|
| aliases |
CVE-2022-3457, GHSA-824x-jcxf-hpfg, PYSEC-2022-43161
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fcym-y8c1-xqdq |
|
| 15 |
| url |
VCID-fdqn-8pt3-2bfz |
| vulnerability_id |
VCID-fdqn-8pt3-2bfz |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3371 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00468 |
| scoring_system |
epss |
| scoring_elements |
0.64829 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00468 |
| scoring_system |
epss |
| scoring_elements |
0.64877 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00468 |
| scoring_system |
epss |
| scoring_elements |
0.6486 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00468 |
| scoring_system |
epss |
| scoring_elements |
0.64871 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00468 |
| scoring_system |
epss |
| scoring_elements |
0.64882 |
| published_at |
2026-06-06T12:55:00Z |
|
| 5 |
| value |
0.00468 |
| scoring_system |
epss |
| scoring_elements |
0.64872 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3371 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/4e8f6136-50c7-4fa1-ac98-699bcb7b35ce |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 2 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:02:31Z/ |
|
|
| url |
https://huntr.dev/bounties/4e8f6136-50c7-4fa1-ac98-699bcb7b35ce |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.10 |
| purl |
pkg:pypi/rdiffweb@2.4.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 10 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 11 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 12 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 13 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 14 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 15 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 16 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 17 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 18 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 19 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 20 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 21 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10 |
|
| 1 |
|
|
| aliases |
CVE-2022-3371, GHSA-3fhq-72hw-jqwv, PYSEC-2022-299
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fdqn-8pt3-2bfz |
|
| 16 |
| url |
VCID-ffd3-kujb-f7fq |
| vulnerability_id |
VCID-ffd3-kujb-f7fq |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3364 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.5655 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56601 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56583 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56598 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56609 |
| published_at |
2026-06-06T12:55:00Z |
|
| 5 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56603 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3364 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/e70ad507-1424-463b-bdf1-c4a6fbe6e720 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
|
| 2 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:Y/T:P/P:M/B:A/M:M/D:T/2025-05-20T16:04:28Z/ |
|
|
| url |
https://huntr.dev/bounties/e70ad507-1424-463b-bdf1-c4a6fbe6e720 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.10 |
| purl |
pkg:pypi/rdiffweb@2.4.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 10 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 11 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 12 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 13 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 14 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 15 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 16 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 17 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 18 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 19 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 20 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 21 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10 |
|
| 1 |
|
|
| aliases |
CVE-2022-3364, GHSA-fqfg-c577-2vc3, PYSEC-2022-298
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ffd3-kujb-f7fq |
|
| 17 |
| url |
VCID-fxxn-nnzy-97bv |
| vulnerability_id |
VCID-fxxn-nnzy-97bv |
| summary |
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3232 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.2917 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.29172 |
| published_at |
2026-06-07T12:55:00Z |
|
| 2 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.29208 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.29241 |
| published_at |
2026-06-05T12:55:00Z |
|
| 4 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.29151 |
| published_at |
2026-06-09T12:55:00Z |
|
| 5 |
| value |
0.00111 |
| scoring_system |
epss |
| scoring_elements |
0.29139 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3232 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.5 |
| purl |
pkg:pypi/rdiffweb@2.4.5 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fg8-rcx8-77fq |
|
| 1 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 2 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 3 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 4 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 5 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 6 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 7 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 8 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 9 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 10 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 11 |
| vulnerability |
VCID-btgq-2yaz-abdd |
|
| 12 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 13 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 14 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 15 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 16 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 17 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 18 |
| vulnerability |
VCID-jy4h-rrhr-83ah |
|
| 19 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 20 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 21 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 22 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 23 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 24 |
| vulnerability |
VCID-pva4-gkpj-juh8 |
|
| 25 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 26 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 27 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 28 |
| vulnerability |
VCID-t1sj-158f-efey |
|
| 29 |
| vulnerability |
VCID-tjr6-1mzd-93ee |
|
| 30 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 31 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 32 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 33 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 34 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 35 |
| vulnerability |
VCID-z43n-dk6v-pffh |
|
| 36 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.5 |
|
|
| aliases |
CVE-2022-3232, GHSA-cw2v-wv4g-w4p6, PYSEC-2022-281
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-fxxn-nnzy-97bv |
|
| 18 |
| url |
VCID-h6v3-24fq-3udw |
| vulnerability_id |
VCID-h6v3-24fq-3udw |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4723 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00102 |
| scoring_system |
epss |
| scoring_elements |
0.27458 |
| published_at |
2026-06-09T12:55:00Z |
|
| 1 |
| value |
0.00102 |
| scoring_system |
epss |
| scoring_elements |
0.27451 |
| published_at |
2026-06-08T12:55:00Z |
|
| 2 |
| value |
0.00102 |
| scoring_system |
epss |
| scoring_elements |
0.27501 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00102 |
| scoring_system |
epss |
| scoring_elements |
0.27539 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00236 |
| scoring_system |
epss |
| scoring_elements |
0.4668 |
| published_at |
2026-06-05T12:55:00Z |
|
| 5 |
| value |
0.00236 |
| scoring_system |
epss |
| scoring_elements |
0.46614 |
| published_at |
2026-06-04T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4723 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
7.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/9369681b-8bfc-4146-a54c-c5108442d92c |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H |
|
| 1 |
| value |
6.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
|
| 2 |
| value |
7.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:16:53Z/ |
|
|
| url |
https://huntr.dev/bounties/9369681b-8bfc-4146-a54c-c5108442d92c |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4723, GHSA-7q4r-x5qg-mmcp, PYSEC-2022-43009
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-h6v3-24fq-3udw |
|
| 19 |
| url |
VCID-jy4h-rrhr-83ah |
| vulnerability_id |
VCID-jy4h-rrhr-83ah |
| summary |
Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3292 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00254 |
| scoring_system |
epss |
| scoring_elements |
0.48924 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00254 |
| scoring_system |
epss |
| scoring_elements |
0.48961 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00254 |
| scoring_system |
epss |
| scoring_elements |
0.48947 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00254 |
| scoring_system |
epss |
| scoring_elements |
0.48977 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00254 |
| scoring_system |
epss |
| scoring_elements |
0.48995 |
| published_at |
2026-06-06T12:55:00Z |
|
| 5 |
| value |
0.00254 |
| scoring_system |
epss |
| scoring_elements |
0.48985 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3292 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.6 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
|
| 1 |
| value |
5.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/e9309018-e94f-4e15-b7d1-5d38b6021c5d |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N |
|
| 1 |
| value |
4.6 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
|
| 2 |
| value |
5.1 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T14:22:00Z/ |
|
|
| url |
https://huntr.dev/bounties/e9309018-e94f-4e15-b7d1-5d38b6021c5d |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.8 |
| purl |
pkg:pypi/rdiffweb@2.4.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-btgq-2yaz-abdd |
|
| 10 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 11 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 12 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 13 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 14 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 15 |
| vulnerability |
VCID-jy4h-rrhr-83ah |
|
| 16 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 17 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 18 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 19 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 20 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 21 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 22 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 23 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 24 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 25 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 26 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8 |
|
| 1 |
| url |
pkg:pypi/rdiffweb@2.4.9 |
| purl |
pkg:pypi/rdiffweb@2.4.9 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 10 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 11 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 12 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 13 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 14 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 15 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 16 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 17 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 18 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 19 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 20 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 21 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 22 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 23 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 24 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.9 |
|
|
| aliases |
CVE-2022-3292, GHSA-7fqm-jm52-f9vc, PYSEC-2022-296
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-jy4h-rrhr-83ah |
|
| 20 |
| url |
VCID-mr71-9e9c-zbda |
| vulnerability_id |
VCID-mr71-9e9c-zbda |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3295 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.5655 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56601 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56583 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56598 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56609 |
| published_at |
2026-06-06T12:55:00Z |
|
| 5 |
| value |
0.00334 |
| scoring_system |
epss |
| scoring_elements |
0.56603 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3295 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L |
|
| 1 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 2 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T20:28:35Z/ |
|
|
| url |
https://huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.8 |
| purl |
pkg:pypi/rdiffweb@2.4.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-btgq-2yaz-abdd |
|
| 10 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 11 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 12 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 13 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 14 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 15 |
| vulnerability |
VCID-jy4h-rrhr-83ah |
|
| 16 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 17 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 18 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 19 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 20 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 21 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 22 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 23 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 24 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 25 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 26 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8 |
|
|
| aliases |
CVE-2022-3295, GHSA-hrj7-f62f-j7x7, PYSEC-2022-293
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-mr71-9e9c-zbda |
|
| 21 |
| url |
VCID-n88y-9qre-n3bz |
| vulnerability_id |
VCID-n88y-9qre-n3bz |
| summary |
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3438 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00314 |
| scoring_system |
epss |
| scoring_elements |
0.54899 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.00314 |
| scoring_system |
epss |
| scoring_elements |
0.54898 |
| published_at |
2026-06-05T12:55:00Z |
|
| 2 |
| value |
0.00314 |
| scoring_system |
epss |
| scoring_elements |
0.5484 |
| published_at |
2026-06-04T12:55:00Z |
|
| 3 |
| value |
0.00314 |
| scoring_system |
epss |
| scoring_elements |
0.549 |
| published_at |
2026-06-09T12:55:00Z |
|
| 4 |
| value |
0.00314 |
| scoring_system |
epss |
| scoring_elements |
0.5488 |
| published_at |
2026-06-08T12:55:00Z |
|
| 5 |
| value |
0.00314 |
| scoring_system |
epss |
| scoring_elements |
0.54908 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3438 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
|
| 1 |
| url |
pkg:pypi/rdiffweb@2.5.0 |
| purl |
pkg:pypi/rdiffweb@2.5.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 9 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 10 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 11 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0 |
|
|
| aliases |
CVE-2022-3438, GHSA-8g9m-vv69-7j99, PYSEC-2022-43158
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-n88y-9qre-n3bz |
|
| 22 |
| url |
VCID-nbqy-kang-vfau |
| vulnerability_id |
VCID-nbqy-kang-vfau |
| summary |
Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3389 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00626 |
| scoring_system |
epss |
| scoring_elements |
0.70578 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00626 |
| scoring_system |
epss |
| scoring_elements |
0.70622 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00626 |
| scoring_system |
epss |
| scoring_elements |
0.706 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00626 |
| scoring_system |
epss |
| scoring_elements |
0.70612 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00626 |
| scoring_system |
epss |
| scoring_elements |
0.70629 |
| published_at |
2026-06-06T12:55:00Z |
|
| 5 |
| value |
0.00626 |
| scoring_system |
epss |
| scoring_elements |
0.7062 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3389 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.10 |
| purl |
pkg:pypi/rdiffweb@2.4.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 10 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 11 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 12 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 13 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 14 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 15 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 16 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 17 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 18 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 19 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 20 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 21 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10 |
|
|
| aliases |
CVE-2022-3389, GHSA-hrrm-895h-xh34, PYSEC-2022-302
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nbqy-kang-vfau |
|
| 23 |
| url |
VCID-nc4e-1muy-1kd7 |
| vulnerability_id |
VCID-nc4e-1muy-1kd7 |
| summary |
Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3301 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00267 |
| scoring_system |
epss |
| scoring_elements |
0.50385 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00267 |
| scoring_system |
epss |
| scoring_elements |
0.50423 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00267 |
| scoring_system |
epss |
| scoring_elements |
0.50405 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00267 |
| scoring_system |
epss |
| scoring_elements |
0.50434 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00267 |
| scoring_system |
epss |
| scoring_elements |
0.50453 |
| published_at |
2026-06-06T12:55:00Z |
|
| 5 |
| value |
0.00267 |
| scoring_system |
epss |
| scoring_elements |
0.50446 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3301 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
2.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
4.8 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
2.4 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N |
|
| 2 |
| value |
4.8 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T17:47:00Z/ |
|
|
| url |
https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.8 |
| purl |
pkg:pypi/rdiffweb@2.4.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-btgq-2yaz-abdd |
|
| 10 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 11 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 12 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 13 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 14 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 15 |
| vulnerability |
VCID-jy4h-rrhr-83ah |
|
| 16 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 17 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 18 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 19 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 20 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 21 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 22 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 23 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 24 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 25 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 26 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8 |
|
|
| aliases |
CVE-2022-3301, GHSA-qq29-5vjh-vxwr, PYSEC-2022-295
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-nc4e-1muy-1kd7 |
|
| 24 |
| url |
VCID-ps4e-cg34-wyah |
| vulnerability_id |
VCID-ps4e-cg34-wyah |
| summary |
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3363 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00492 |
| scoring_system |
epss |
| scoring_elements |
0.65997 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00492 |
| scoring_system |
epss |
| scoring_elements |
0.66052 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00492 |
| scoring_system |
epss |
| scoring_elements |
0.66034 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00492 |
| scoring_system |
epss |
| scoring_elements |
0.66046 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00492 |
| scoring_system |
epss |
| scoring_elements |
0.66061 |
| published_at |
2026-06-06T12:55:00Z |
|
| 5 |
| value |
0.00492 |
| scoring_system |
epss |
| scoring_elements |
0.66049 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3363 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
2.8 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:L |
|
| 1 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-07T18:29:00Z/ |
|
|
| url |
https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.5.0a7 |
| purl |
pkg:pypi/rdiffweb@2.5.0a7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 9 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 10 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 11 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 12 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 13 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 14 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 15 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 16 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 17 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0a7 |
|
| 1 |
| url |
pkg:pypi/rdiffweb@2.5.0 |
| purl |
pkg:pypi/rdiffweb@2.5.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 9 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 10 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 11 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0 |
|
|
| aliases |
CVE-2022-3363, GHSA-jw36-mrvg-j5fx, PYSEC-2022-42978
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ps4e-cg34-wyah |
|
| 25 |
| url |
VCID-pva4-gkpj-juh8 |
| vulnerability_id |
VCID-pva4-gkpj-juh8 |
| summary |
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3250 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00371 |
| scoring_system |
epss |
| scoring_elements |
0.59196 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00371 |
| scoring_system |
epss |
| scoring_elements |
0.59239 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00371 |
| scoring_system |
epss |
| scoring_elements |
0.59223 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00371 |
| scoring_system |
epss |
| scoring_elements |
0.59241 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00371 |
| scoring_system |
epss |
| scoring_elements |
0.59248 |
| published_at |
2026-06-06T12:55:00Z |
|
| 5 |
| value |
0.00371 |
| scoring_system |
epss |
| scoring_elements |
0.59244 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3250 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/39889a3f-8bb7-448a-b0d4-a18c671bbd23 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.9 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |
|
| 2 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-28T13:43:20Z/ |
|
|
| url |
https://huntr.dev/bounties/39889a3f-8bb7-448a-b0d4-a18c671bbd23 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.6 |
| purl |
pkg:pypi/rdiffweb@2.4.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fg8-rcx8-77fq |
|
| 1 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 2 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 3 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 4 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 5 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 6 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 7 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 8 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 9 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 10 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 11 |
| vulnerability |
VCID-btgq-2yaz-abdd |
|
| 12 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 13 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 14 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 15 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 16 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 17 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 18 |
| vulnerability |
VCID-jy4h-rrhr-83ah |
|
| 19 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 20 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 21 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 22 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 23 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 24 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 25 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 26 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 27 |
| vulnerability |
VCID-t1sj-158f-efey |
|
| 28 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 29 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 30 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 31 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 32 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 33 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6 |
|
|
| aliases |
CVE-2022-3250, GHSA-m748-hjqg-rpp8, PYSEC-2022-287
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-pva4-gkpj-juh8 |
|
| 26 |
| url |
VCID-qcsd-5htt-h3ev |
| vulnerability_id |
VCID-qcsd-5htt-h3ev |
| summary |
Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4722 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.37146 |
| published_at |
2026-06-05T12:55:00Z |
|
| 1 |
| value |
0.00164 |
| scoring_system |
epss |
| scoring_elements |
0.37055 |
| published_at |
2026-06-04T12:55:00Z |
|
| 2 |
| value |
0.00243 |
| scoring_system |
epss |
| scoring_elements |
0.4773 |
| published_at |
2026-06-09T12:55:00Z |
|
| 3 |
| value |
0.00243 |
| scoring_system |
epss |
| scoring_elements |
0.47718 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00243 |
| scoring_system |
epss |
| scoring_elements |
0.47747 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.00243 |
| scoring_system |
epss |
| scoring_elements |
0.47765 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4722 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.2 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
8.6 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/c62126dc-d9a6-4d3e-988d-967031876c58 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.2 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
7.2 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
8.6 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:46:39Z/ |
|
|
| url |
https://huntr.dev/bounties/c62126dc-d9a6-4d3e-988d-967031876c58 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4722, GHSA-wf33-6x33-wcf9, PYSEC-2022-43008
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-qcsd-5htt-h3ev |
|
| 27 |
| url |
VCID-rynh-v7q5-6kdg |
| vulnerability_id |
VCID-rynh-v7q5-6kdg |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3439 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00509 |
| scoring_system |
epss |
| scoring_elements |
0.66734 |
| published_at |
2026-06-09T12:55:00Z |
|
| 1 |
| value |
0.00509 |
| scoring_system |
epss |
| scoring_elements |
0.66698 |
| published_at |
2026-06-04T12:55:00Z |
|
| 2 |
| value |
0.00509 |
| scoring_system |
epss |
| scoring_elements |
0.66739 |
| published_at |
2026-06-05T12:55:00Z |
|
| 3 |
| value |
0.00509 |
| scoring_system |
epss |
| scoring_elements |
0.66747 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00509 |
| scoring_system |
epss |
| scoring_elements |
0.66733 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.00509 |
| scoring_system |
epss |
| scoring_elements |
0.66717 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3439 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.5.0 |
| purl |
pkg:pypi/rdiffweb@2.5.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 9 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 10 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 11 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0 |
|
|
| aliases |
CVE-2022-3439, GHSA-x8x2-wc2h-wc48, PYSEC-2022-43159
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-rynh-v7q5-6kdg |
|
| 28 |
| url |
VCID-sn4z-f439-6qe7 |
| vulnerability_id |
VCID-sn4z-f439-6qe7 |
| summary |
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3376 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00489 |
| scoring_system |
epss |
| scoring_elements |
0.65843 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00489 |
| scoring_system |
epss |
| scoring_elements |
0.65901 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00489 |
| scoring_system |
epss |
| scoring_elements |
0.65893 |
| published_at |
2026-06-07T12:55:00Z |
|
| 3 |
| value |
0.00489 |
| scoring_system |
epss |
| scoring_elements |
0.65907 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00489 |
| scoring_system |
epss |
| scoring_elements |
0.65896 |
| published_at |
2026-06-05T12:55:00Z |
|
| 5 |
| value |
0.00489 |
| scoring_system |
epss |
| scoring_elements |
0.65882 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3376 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.11a1 |
| purl |
pkg:pypi/rdiffweb@2.4.11a1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 10 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 11 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 12 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 13 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 14 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 15 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 16 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 17 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 18 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1 |
|
| 1 |
| url |
pkg:pypi/rdiffweb@2.5.0 |
| purl |
pkg:pypi/rdiffweb@2.5.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 9 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 10 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 11 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0 |
|
|
| aliases |
CVE-2022-3376, GHSA-7wr6-fj4x-893v, PYSEC-2022-43157
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-sn4z-f439-6qe7 |
|
| 29 |
| url |
VCID-t1sj-158f-efey |
| vulnerability_id |
VCID-t1sj-158f-efey |
| summary |
Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3269 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00357 |
| scoring_system |
epss |
| scoring_elements |
0.58201 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00357 |
| scoring_system |
epss |
| scoring_elements |
0.58251 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00357 |
| scoring_system |
epss |
| scoring_elements |
0.58233 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00357 |
| scoring_system |
epss |
| scoring_elements |
0.58248 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00357 |
| scoring_system |
epss |
| scoring_elements |
0.58258 |
| published_at |
2026-06-06T12:55:00Z |
|
| 5 |
| value |
0.00357 |
| scoring_system |
epss |
| scoring_elements |
0.5825 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3269 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/67c25969-5e7a-4424-817e-e1a918f63cc6 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.4 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:L |
|
| 1 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-22T15:53:26Z/ |
|
|
| url |
https://huntr.dev/bounties/67c25969-5e7a-4424-817e-e1a918f63cc6 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.7 |
| purl |
pkg:pypi/rdiffweb@2.4.7 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 3 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 4 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 5 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 6 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 7 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 8 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 9 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 10 |
| vulnerability |
VCID-btgq-2yaz-abdd |
|
| 11 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 12 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 13 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 14 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 15 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 16 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 17 |
| vulnerability |
VCID-jy4h-rrhr-83ah |
|
| 18 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 19 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 20 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 21 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 22 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 23 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 24 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 25 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 26 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 27 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 28 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 29 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 30 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 31 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.7 |
|
|
| aliases |
CVE-2022-3269, GHSA-j3q4-gmj4-mj95, PYSEC-2022-290
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-t1sj-158f-efey |
|
| 30 |
| url |
VCID-tjr6-1mzd-93ee |
| vulnerability_id |
VCID-tjr6-1mzd-93ee |
| summary |
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3233 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0013 |
| scoring_system |
epss |
| scoring_elements |
0.32055 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.0013 |
| scoring_system |
epss |
| scoring_elements |
0.32058 |
| published_at |
2026-06-07T12:55:00Z |
|
| 2 |
| value |
0.0013 |
| scoring_system |
epss |
| scoring_elements |
0.32095 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.0013 |
| scoring_system |
epss |
| scoring_elements |
0.32127 |
| published_at |
2026-06-05T12:55:00Z |
|
| 4 |
| value |
0.0013 |
| scoring_system |
epss |
| scoring_elements |
0.32049 |
| published_at |
2026-06-09T12:55:00Z |
|
| 5 |
| value |
0.0013 |
| scoring_system |
epss |
| scoring_elements |
0.32026 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3233 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/5ec206e0-eca0-4957-9af4-fdd9185d1db3 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.3 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
4.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
|
| 2 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-23T20:32:28Z/ |
|
|
| url |
https://huntr.dev/bounties/5ec206e0-eca0-4957-9af4-fdd9185d1db3 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.6 |
| purl |
pkg:pypi/rdiffweb@2.4.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fg8-rcx8-77fq |
|
| 1 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 2 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 3 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 4 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 5 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 6 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 7 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 8 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 9 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 10 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 11 |
| vulnerability |
VCID-btgq-2yaz-abdd |
|
| 12 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 13 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 14 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 15 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 16 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 17 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 18 |
| vulnerability |
VCID-jy4h-rrhr-83ah |
|
| 19 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 20 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 21 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 22 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 23 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 24 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 25 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 26 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 27 |
| vulnerability |
VCID-t1sj-158f-efey |
|
| 28 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 29 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 30 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 31 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 32 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 33 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6 |
|
|
| aliases |
CVE-2022-3233, GHSA-9vxf-mcm6-5m42, PYSEC-2022-285
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tjr6-1mzd-93ee |
|
| 31 |
| url |
VCID-tv4c-g8r6-xbf6 |
| vulnerability_id |
VCID-tv4c-g8r6-xbf6 |
| summary |
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4644 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00185 |
| scoring_system |
epss |
| scoring_elements |
0.40022 |
| published_at |
2026-06-05T12:55:00Z |
|
| 1 |
| value |
0.00185 |
| scoring_system |
epss |
| scoring_elements |
0.39997 |
| published_at |
2026-06-07T12:55:00Z |
|
| 2 |
| value |
0.00185 |
| scoring_system |
epss |
| scoring_elements |
0.40025 |
| published_at |
2026-06-06T12:55:00Z |
|
| 3 |
| value |
0.00185 |
| scoring_system |
epss |
| scoring_elements |
0.3994 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.00185 |
| scoring_system |
epss |
| scoring_elements |
0.39988 |
| published_at |
2026-06-09T12:55:00Z |
|
| 5 |
| value |
0.00185 |
| scoring_system |
epss |
| scoring_elements |
0.3997 |
| published_at |
2026-06-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4644 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.9 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L |
|
| 1 |
| value |
6.1 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
|
| 2 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T18:32:13Z/ |
|
|
| url |
https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4644, GHSA-639f-hxcv-84mc, PYSEC-2022-43003
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-tv4c-g8r6-xbf6 |
|
| 32 |
| url |
VCID-vmrb-sm2h-hqf1 |
| vulnerability_id |
VCID-vmrb-sm2h-hqf1 |
| summary |
Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3290 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00299 |
| scoring_system |
epss |
| scoring_elements |
0.53557 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00299 |
| scoring_system |
epss |
| scoring_elements |
0.53611 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00299 |
| scoring_system |
epss |
| scoring_elements |
0.53588 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00299 |
| scoring_system |
epss |
| scoring_elements |
0.53612 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00299 |
| scoring_system |
epss |
| scoring_elements |
0.53625 |
| published_at |
2026-06-06T12:55:00Z |
|
| 5 |
| value |
0.00299 |
| scoring_system |
epss |
| scoring_elements |
0.53616 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3290 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
| reference_url |
https://huntr.dev/bounties/d8b8519d-96a5-484c-8141-624c54290bf5 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.7 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H |
|
| 1 |
| value |
7.5 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
|
| 2 |
| value |
8.7 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-21T20:06:59Z/ |
|
|
| url |
https://huntr.dev/bounties/d8b8519d-96a5-484c-8141-624c54290bf5 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.8 |
| purl |
pkg:pypi/rdiffweb@2.4.8 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-btgq-2yaz-abdd |
|
| 10 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 11 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 12 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 13 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 14 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 15 |
| vulnerability |
VCID-jy4h-rrhr-83ah |
|
| 16 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 17 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 18 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 19 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 20 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 21 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 22 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 23 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 24 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 25 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 26 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.8 |
|
|
| aliases |
CVE-2022-3290, GHSA-5v95-j4rr-6f3c, PYSEC-2022-292, PYSEC-2022-43184
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-vmrb-sm2h-hqf1 |
|
| 33 |
| url |
VCID-wyn5-w4qh-nfht |
| vulnerability_id |
VCID-wyn5-w4qh-nfht |
| summary |
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4719 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00422 |
| scoring_system |
epss |
| scoring_elements |
0.6244 |
| published_at |
2026-06-05T12:55:00Z |
|
| 1 |
| value |
0.00422 |
| scoring_system |
epss |
| scoring_elements |
0.62438 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00422 |
| scoring_system |
epss |
| scoring_elements |
0.62424 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00422 |
| scoring_system |
epss |
| scoring_elements |
0.62439 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00422 |
| scoring_system |
epss |
| scoring_elements |
0.62394 |
| published_at |
2026-06-04T12:55:00Z |
|
| 5 |
| value |
0.00422 |
| scoring_system |
epss |
| scoring_elements |
0.62449 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-4719 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.7 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L |
|
| 1 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
5.7 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L |
|
| 1 |
| value |
5.7 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L |
|
| 2 |
| value |
6.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:49:14Z/ |
|
|
| url |
https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-4719, GHSA-2wpw-cm9w-v4xm, PYSEC-2022-43005
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-wyn5-w4qh-nfht |
|
| 34 |
| url |
VCID-yssm-eyx3-efhs |
| vulnerability_id |
VCID-yssm-eyx3-efhs |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3456 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00316 |
| scoring_system |
epss |
| scoring_elements |
0.54954 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00316 |
| scoring_system |
epss |
| scoring_elements |
0.55014 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00316 |
| scoring_system |
epss |
| scoring_elements |
0.54993 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00316 |
| scoring_system |
epss |
| scoring_elements |
0.55021 |
| published_at |
2026-06-06T12:55:00Z |
|
| 4 |
| value |
0.00316 |
| scoring_system |
epss |
| scoring_elements |
0.55012 |
| published_at |
2026-06-07T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3456 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.5.0 |
| purl |
pkg:pypi/rdiffweb@2.5.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 9 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 10 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 11 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0 |
|
|
| aliases |
CVE-2022-3456, GHSA-92gf-p376-6r9r, PYSEC-2022-43160
|
| risk_score |
4.4 |
| exploitability |
0.5 |
| weighted_severity |
8.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-yssm-eyx3-efhs |
|
| 35 |
| url |
VCID-yz9x-nz9u-wybe |
| vulnerability_id |
VCID-yz9x-nz9u-wybe |
| summary |
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3327 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.0033 |
| scoring_system |
epss |
| scoring_elements |
0.56269 |
| published_at |
2026-06-07T12:55:00Z |
|
| 1 |
| value |
0.0033 |
| scoring_system |
epss |
| scoring_elements |
0.56272 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.0033 |
| scoring_system |
epss |
| scoring_elements |
0.56253 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.0033 |
| scoring_system |
epss |
| scoring_elements |
0.5622 |
| published_at |
2026-06-04T12:55:00Z |
|
| 4 |
| value |
0.0033 |
| scoring_system |
epss |
| scoring_elements |
0.56276 |
| published_at |
2026-06-05T12:55:00Z |
|
| 5 |
| value |
0.0033 |
| scoring_system |
epss |
| scoring_elements |
0.56282 |
| published_at |
2026-06-06T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3327 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 2 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
| reference_url |
https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.5 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N |
|
| 1 |
| value |
9.8 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
|
| 2 |
| value |
9.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N |
|
| 3 |
| value |
CRITICAL |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-09T14:18:37Z/ |
|
|
| url |
https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1 |
|
| 6 |
|
| 7 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.10 |
| purl |
pkg:pypi/rdiffweb@2.4.10 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 10 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 11 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 12 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 13 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 14 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 15 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 16 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 17 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 18 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 19 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 20 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 21 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.10 |
|
| 1 |
| url |
pkg:pypi/rdiffweb@2.5.0 |
| purl |
pkg:pypi/rdiffweb@2.5.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 9 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 10 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 11 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0 |
|
|
| aliases |
CVE-2022-3327, GHSA-99j5-fvg3-54pm, PYSEC-2022-42977
|
| risk_score |
4.5 |
| exploitability |
0.5 |
| weighted_severity |
9.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-yz9x-nz9u-wybe |
|
| 36 |
| url |
VCID-z43n-dk6v-pffh |
| vulnerability_id |
VCID-z43n-dk6v-pffh |
| summary |
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3267 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00169 |
| scoring_system |
epss |
| scoring_elements |
0.37825 |
| published_at |
2026-06-04T12:55:00Z |
|
| 1 |
| value |
0.00169 |
| scoring_system |
epss |
| scoring_elements |
0.37865 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00169 |
| scoring_system |
epss |
| scoring_elements |
0.37853 |
| published_at |
2026-06-08T12:55:00Z |
|
| 3 |
| value |
0.00169 |
| scoring_system |
epss |
| scoring_elements |
0.37888 |
| published_at |
2026-06-07T12:55:00Z |
|
| 4 |
| value |
0.00169 |
| scoring_system |
epss |
| scoring_elements |
0.37919 |
| published_at |
2026-06-06T12:55:00Z |
|
| 5 |
| value |
0.00169 |
| scoring_system |
epss |
| scoring_elements |
0.37916 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3267 |
|
| 1 |
| reference_url |
https://github.com/ikus060/rdiffweb |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
4.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
|
| 1 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 2 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
|
| url |
https://github.com/ikus060/rdiffweb |
|
| 2 |
|
| 3 |
|
| 4 |
| reference_url |
https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.8 |
| scoring_system |
cvssv3 |
| scoring_elements |
CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L |
|
| 1 |
| value |
4.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
|
| 2 |
| value |
5.3 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N |
|
| 3 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 4 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-05-23T20:21:36Z/ |
|
|
| url |
https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.6 |
| purl |
pkg:pypi/rdiffweb@2.4.6 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-1fg8-rcx8-77fq |
|
| 1 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 2 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 3 |
| vulnerability |
VCID-29xz-5wxu-ybed |
|
| 4 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 5 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 6 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 7 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 8 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 9 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 10 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 11 |
| vulnerability |
VCID-btgq-2yaz-abdd |
|
| 12 |
| vulnerability |
VCID-dpbu-gy6u-abd3 |
|
| 13 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 14 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 15 |
| vulnerability |
VCID-fdqn-8pt3-2bfz |
|
| 16 |
| vulnerability |
VCID-ffd3-kujb-f7fq |
|
| 17 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 18 |
| vulnerability |
VCID-jy4h-rrhr-83ah |
|
| 19 |
| vulnerability |
VCID-mr71-9e9c-zbda |
|
| 20 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 21 |
| vulnerability |
VCID-nbqy-kang-vfau |
|
| 22 |
| vulnerability |
VCID-nc4e-1muy-1kd7 |
|
| 23 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 24 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 25 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 26 |
| vulnerability |
VCID-sn4z-f439-6qe7 |
|
| 27 |
| vulnerability |
VCID-t1sj-158f-efey |
|
| 28 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 29 |
| vulnerability |
VCID-vmrb-sm2h-hqf1 |
|
| 30 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 31 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
| 32 |
| vulnerability |
VCID-yz9x-nz9u-wybe |
|
| 33 |
| vulnerability |
VCID-zzjz-9wv2-vfcc |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.6 |
|
|
| aliases |
CVE-2022-3267, GHSA-74j6-3hh4-w3f5, PYSEC-2022-284
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-z43n-dk6v-pffh |
|
| 37 |
| url |
VCID-zzjz-9wv2-vfcc |
| vulnerability_id |
VCID-zzjz-9wv2-vfcc |
| summary |
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. |
| references |
| 0 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3273 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.00198 |
| scoring_system |
epss |
| scoring_elements |
0.4186 |
| published_at |
2026-06-06T12:55:00Z |
|
| 1 |
| value |
0.00198 |
| scoring_system |
epss |
| scoring_elements |
0.41805 |
| published_at |
2026-06-09T12:55:00Z |
|
| 2 |
| value |
0.00198 |
| scoring_system |
epss |
| scoring_elements |
0.41775 |
| published_at |
2026-06-04T12:55:00Z |
|
| 3 |
| value |
0.00198 |
| scoring_system |
epss |
| scoring_elements |
0.41797 |
| published_at |
2026-06-08T12:55:00Z |
|
| 4 |
| value |
0.00198 |
| scoring_system |
epss |
| scoring_elements |
0.41831 |
| published_at |
2026-06-07T12:55:00Z |
|
| 5 |
| value |
0.00198 |
| scoring_system |
epss |
| scoring_elements |
0.41851 |
| published_at |
2026-06-05T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-3273 |
|
| 1 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
|
| fixed_packages |
| 0 |
| url |
pkg:pypi/rdiffweb@2.4.11a1 |
| purl |
pkg:pypi/rdiffweb@2.4.11a1 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-5xg7-u3nr-nkfg |
|
| 7 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 8 |
| vulnerability |
VCID-9f5c-ne9b-27fd |
|
| 9 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 10 |
| vulnerability |
VCID-fcym-y8c1-xqdq |
|
| 11 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 12 |
| vulnerability |
VCID-n88y-9qre-n3bz |
|
| 13 |
| vulnerability |
VCID-ps4e-cg34-wyah |
|
| 14 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 15 |
| vulnerability |
VCID-rynh-v7q5-6kdg |
|
| 16 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 17 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
| 18 |
| vulnerability |
VCID-yssm-eyx3-efhs |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.4.11a1 |
|
| 1 |
| url |
pkg:pypi/rdiffweb@2.5.0 |
| purl |
pkg:pypi/rdiffweb@2.5.0 |
| is_vulnerable |
true |
| affected_by_vulnerabilities |
| 0 |
| vulnerability |
VCID-25yw-5nru-aygm |
|
| 1 |
| vulnerability |
VCID-287j-23ju-9fhk |
|
| 2 |
| vulnerability |
VCID-2n1n-8nzg-xuh3 |
|
| 3 |
| vulnerability |
VCID-52wf-fheq-cuer |
|
| 4 |
| vulnerability |
VCID-57wc-s2nn-cyeu |
|
| 5 |
| vulnerability |
VCID-5k13-n5su-sqce |
|
| 6 |
| vulnerability |
VCID-6zc1-xs64-1bc6 |
|
| 7 |
| vulnerability |
VCID-ep38-eu98-fbas |
|
| 8 |
| vulnerability |
VCID-h6v3-24fq-3udw |
|
| 9 |
| vulnerability |
VCID-qcsd-5htt-h3ev |
|
| 10 |
| vulnerability |
VCID-tv4c-g8r6-xbf6 |
|
| 11 |
| vulnerability |
VCID-wyn5-w4qh-nfht |
|
|
| resource_url |
http://public2.vulnerablecode.io/packages/pkg:pypi/rdiffweb@2.5.0 |
|
|
| aliases |
CVE-2022-3273, GHSA-9g3v-v24q-jj5p, PYSEC-2022-43156
|
| risk_score |
4.4 |
| exploitability |
0.5 |
| weighted_severity |
8.8 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-zzjz-9wv2-vfcc |
|