rclone

rclone is a command-line program to sync files and directories to and from different cloud storage providers.

Rclone is a command-line program to sync files and directories to and from different cloud storage providers.

Rclone is a command-line program to sync files and directories to and from different cloud storage providers.

rclone is a command-line program to sync files and directories to and from different cloud storage providers.

Rclone is a command-line program to sync files and directories to and from different cloud storage providers.

rclone is a command-line program to sync files and directories to and from different cloud storage providers.

rclone is a command-line program to sync files and directories to and from different cloud storage providers.

Rclone is a command-line program to sync files and directories to and from different cloud storage providers.

Rclone from 1.64.0 before 1.75.2 contains an authentication bypass vulnerability in serve webdav that lets unauthenticated attackers skip authentication by sending OPTIONS requests.

rclone serve s3 versions 1.75.0 before 1.75.2 contain an integer overflow vulnerability in multipart reorder-memory accounting that bypasses the configured buffer limit.

rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level files by using dot-dot segments in S3 object keys.

rclone before 1.75.0 mounts the pprof debug handler as its own router route, bypassing the fail-closed authentication rule in the main handler.

rclone from 1.37 before 1.74.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers to redirect http and netstorage backend requests by supplying a double-slash root on an existing n…

rclone from 1.55.0 before 1.75.2 contains a signature verification bypass in stable selfupdate that trusts checksums from unsigned bytes preceding the PGP-clearsigned SHA256SUMS block.

Rclone from 1.52.0 before 1.75.2 contains a cross-site request forgery vulnerability in the pCloud backend's localhost OAuth callback, which disables the state check and trusts the hostname parameter.

rclone is a command-line program to sync files and directories to and from different cloud storage providers.

rclone versions >= v1.72.0 and <= v1.74.4 (fixed in v1.75.0) contain multiple denial-of-service vulnerabilities in the archive backend's SquashFS parser, which relies on the github.com/diskfs/go-diskfs dependency.

rclone is a command-line program to sync files and directories to and from different cloud storage providers.

rclone is a command-line program to sync files and directories to and from different cloud storage providers.

rclone is a command-line program to sync files and directories to and from different cloud storage providers.

rclone from v1.56.0 before v1.75.2 contains an information disclosure vulnerability in the WebDAV backend that forwards operator-configured custom credential headers to different hosts on HTTP 3xx redirects.

rclone before v1.75.0 fails to sanitize IBM IAM bearer tokens and SSE-C encryption keys during S3 redirect callbacks, allowing credentials to be preserved across scheme or host changes.

rclone before v1.75.0 contains a denial of service vulnerability in the WebDAV TUS creation handler that dereferences a nil response before checking for transport errors.

rclone is a command-line program to sync files and directories to and from different cloud storage providers.

rclone is a command-line program to sync files and directories to and from different cloud storage providers.