Staging Environment: Content and features may be unstable or change without notice.
Search for vulnerabilities
Vulnerability details: VCID-2eka-zuqa-fqaw
Vulnerability ID VCID-2eka-zuqa-fqaw
Aliases CVE-2022-4719
GHSA-2wpw-cm9w-v4xm
PYSEC-2022-43005
Summary Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Status Published
Exploitability 0.5
Weighted Severity 6.2
Risk 3.1
Affected and Fixed Packages Package Details
Weaknesses (3)
System Score Found at
epss 0.00422 https://api.first.org/data/v1/epss?cve=CVE-2022-4719
epss 0.00422 https://api.first.org/data/v1/epss?cve=CVE-2022-4719
epss 0.00422 https://api.first.org/data/v1/epss?cve=CVE-2022-4719
cvssv3.1_qr MODERATE https://github.com/advisories/GHSA-2wpw-cm9w-v4xm
cvssv3.1 5.7 https://github.com/ikus060/rdiffweb
cvssv4 6.9 https://github.com/ikus060/rdiffweb
generic_textual MODERATE https://github.com/ikus060/rdiffweb
cvssv3 5.7 https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d
cvssv3.1 5.7 https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d
cvssv4 6.9 https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d
generic_textual MODERATE https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d
ssvc Track https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d
cvssv3.1 5.7 https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43005.yaml
cvssv4 6.9 https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43005.yaml
generic_textual MODERATE https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43005.yaml
cvssv3 5.7 https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09
cvssv3.1 5.7 https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09
cvssv4 6.9 https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09
generic_textual MODERATE https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09
ssvc Track https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09
cvssv3.1 5.7 https://nvd.nist.gov/vuln/detail/CVE-2022-4719
cvssv4 6.9 https://nvd.nist.gov/vuln/detail/CVE-2022-4719
generic_textual MODERATE https://nvd.nist.gov/vuln/detail/CVE-2022-4719
No exploits are available.
Vector: CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L Found at https://github.com/ikus060/rdiffweb
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N Found at https://github.com/ikus060/rdiffweb
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L Found at https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L Found at https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N Found at https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none


Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:49:14Z/ Found at https://github.com/ikus060/rdiffweb/commit/bc4bed89affcba71251fe54ed10639da9d392c1d
Vector: CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L Found at https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43005.yaml
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N Found at https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43005.yaml
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L Found at https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L Found at https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N Found at https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none


Vector: SSVCv2/E:P/A:N/T:P/P:M/B:A/M:M/D:T/2025-04-09T17:49:14Z/ Found at https://huntr.dev/bounties/9f746881-ad42-446b-9b1d-153391eacc09
Vector: CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L Found at https://nvd.nist.gov/vuln/detail/CVE-2022-4719
Attack Vector (AV) Attack Complexity (AC) Privileges Required (PR) User Interaction (UI) Scope (S) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

network

adjacent_network

local

physical

low

high

none

low

high

none

required

unchanged

changed

high

low

none

high

low

none

high

low

none

Vector: CVSS:4.0/AV:P/AC:L/AT:N/PR:H/UI:P/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N Found at https://nvd.nist.gov/vuln/detail/CVE-2022-4719
Attack Vector (AV) Attack Complexity (AC) Attack Requirements (AT) Privileges Required (PR) User Interaction (UI) Vulnerable System Impact Confidentiality (VC) Vulnerable System Impact Integrity (VI) Vulnerable System Impact Availability (VA) Subsequent System Impact Confidentiality (SC) Subsequent System Impact Integrity (SI) Subsequent System Impact Availability (SA)

network

adjacent

local

physical

low

high

none

present

none

low

high

none

passive

active

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

high

low

none

Exploit Prediction Scoring System (EPSS)
Percentile 0.62503
EPSS Score 0.00422
Published At June 11, 2026, 12:55 p.m.
Date Actor Action Source VulnerableCode Version
2026-06-11T17:38:56.166510+00:00 Vulnrichment Import https://github.com/cisagov/vulnrichment/blob/develop/2022/4xxx/CVE-2022-4719.json 38.6.0