ikus060

Records46All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high14CVSS 7.0–8.9

Exploited now

ikus060 records in CISA KEV

No ikus060 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Rdiffweb 42 records HIGH Minarca 2 records MEDIUM

Records

46 records

TI-2022-03176 CVE-2022-3439 · GHSA-x8x2-wc2h-wc48

Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

HIGH 82

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00824 Published 2022-10-14 Fixed in 2.5.0 CWE-770

TI-2022-03107 CVE-2022-3362 · GHSA-94qm-99qc-qwqj

Insufficient Session Expiration in ikus060/rdiffweb

HIGH 76

Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00954 Published 2022-11-14 Fixed in 2.5.0 CWE-613

TI-2022-04320 CVE-2022-4724 · GHSA-m8r9-qxx8-mrxp

Improper Access Control in ikus060/rdiffweb

HIGH 75

Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00883 Published 2022-12-23 Fixed in 2.5.5 CWE-284

TI-2022-04315 CVE-2022-4719 · GHSA-2wpw-cm9w-v4xm

Business Logic Errors in ikus060/rdiffweb

HIGH 75

Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01032 Published 2022-12-23 Fixed in 2.5.5 CWE-840

TI-2022-03952 CVE-2022-4314 · GHSA-g594-55mp-f6q8

Improper Privilege Management in ikus060/rdiffweb

HIGH 75

Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00843 Published 2022-12-06 Fixed in 2.5.2 CWE-269

TI-2022-03191 CVE-2022-3456 · GHSA-92gf-p376-6r9r

Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

HIGH 75

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00413 Published 2022-10-13 Fixed in 2.5.0 CWE-770

TI-2022-03108 CVE-2022-3363 · GHSA-jw36-mrvg-j5fx

Business Logic Errors in ikus060/rdiffweb

HIGH 75

Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00998 Published 2022-10-26 Fixed in 2.5.0a7 CWE-840

TI-2022-03075 CVE-2022-3327 · GHSA-99j5-fvg3-54pm

Missing Authentication for Critical Function in ikus060/rdiffweb

HIGH 75

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0102 Published 2022-10-19 Fixed in 2.5.0a6, 2.5.0 CWE-306

TI-2022-03020 CVE-2022-3269 · GHSA-j3q4-gmj4-mj95

Session Fixation in ikus060/rdiffweb

HIGH 75

Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00908 Published 2022-09-23 Fixed in 2.4.7 CWE-384

TI-2022-03115 CVE-2022-3371 · GHSA-3fhq-72hw-jqwv

Resource allocation without limits in ikus060/rdiffweb

HIGH 72

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01332 Published 2022-09-30 Fixed in 2.5.0a3 CWE-770

TI-2022-03109 CVE-2022-3364 · GHSA-fqfg-c577-2vc3

Resource allocation without limits in ikus060/rdiffweb

HIGH 72

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01169 Published 2022-09-29 Fixed in 2.5.0a3 CWE-770

TI-2022-03047 CVE-2022-3298 · GHSA-xhw9-4wqq-x67v

Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

HIGH 72

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01153 Published 2022-09-26 Fixed in 2.4.8 CWE-770

TI-2022-03022 CVE-2022-3272 · GHSA-qrj3-hrgj-fm7r

Improper Handling of Length Parameter Inconsistency in ikus060/rdiffweb

HIGH 72

Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01757 Published 2022-09-26 Fixed in 2.4.8 CWE-130

TI-2023-04865 CVE-2023-5289 · GHSA-c4rv-2j6x-pq7x

Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

HIGH 71

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00775 Published 2023-09-29 Fixed in 2.8.4 CWE-770

TI-2022-03044 CVE-2022-3295 · GHSA-hrj7-f62f-j7x7

Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

HIGH 66

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01153 Published 2022-09-26 Fixed in 2.4.8 CWE-770

TI-2022-03039 CVE-2022-3290 · GHSA-5v95-j4rr-6f3c

Improper Handling of Length Parameter Inconsistency in ikus060/rdiffweb

HIGH 66

Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00889 Published 2022-09-26 Fixed in 2.4.8 CWE-130

TI-2022-04318 CVE-2022-4722 · GHSA-wf33-6x33-wcf9

Authentication Bypass by Primary Weakness in ikus060/rdiffweb

HIGH 65

Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01206 Published 2022-12-23 Fixed in 2.5.5 CWE-305

TI-2023-03830 CVE-2023-4138 · GHSA-wwrg-2w5j-grvx

Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

MEDIUM 62

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00448 Published 2023-08-03 Fixed in 2.8.0, 2.8.1 CWE-770

TI-2022-04319 CVE-2022-4723 · GHSA-7q4r-x5qg-mmcp

Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

MEDIUM 62

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00674 Published 2022-12-23 Fixed in 2.5.5 CWE-770

TI-2022-04246 CVE-2022-4646 · GHSA-85fp-523q-5xwc

Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb

MEDIUM 62

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0034 Published 2022-12-22 Fixed in 2.5.4 CWE-352

TI-2022-04316 CVE-2022-4720 · GHSA-h5wp-jrqc-cwwx

Open Redirect in ikus060/rdiffweb

MEDIUM 60

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00514 Published 2022-12-23 Fixed in 2.5.5 CWE-601

TI-2022-04244 CVE-2022-4644 · GHSA-639f-hxcv-84mc

Open Redirect in ikus060/rdiffweb

MEDIUM 60

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0064 Published 2022-12-22 Fixed in 2.5.4 CWE-601

TI-2022-03004 CVE-2022-3251 · GHSA-32c6-653x-x3pm

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/minarca

MEDIUM 59

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/minarca prior to 4.2.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.007 Published 2022-09-21 Fixed in 4.2.2 CWE-614

TI-2022-04317 CVE-2022-4721 · GHSA-83pm-7v48-5jp4

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffweb

MEDIUM 58

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00517 Published 2022-12-23 Fixed in 2.5.5 CWE-75

TI-2022-03003 CVE-2022-3250 · GHSA-m748-hjqg-rpp8

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb

MEDIUM 57

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00541 Published 2022-09-21 Fixed in 2.4.6 CWE-614

Open these records in search →