Vulnerabilities

TI-2023-04865 CVE-2023-5289 · GHSA-c4rv-2j6x-pq7x

Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

HIGH 71

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00775 Published 2023-09-29 Fixed in 2.8.4 CWE-770

TI-2023-03830 CVE-2023-4138 · GHSA-wwrg-2w5j-grvx

Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

MEDIUM 62

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00448 Published 2023-08-03 Fixed in 2.8.0, 2.8.1 CWE-770

TI-2022-04320 CVE-2022-4724 · GHSA-m8r9-qxx8-mrxp

Improper Access Control in ikus060/rdiffweb

HIGH 75

Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00883 Published 2022-12-23 Fixed in 2.5.5 CWE-284

TI-2022-04319 CVE-2022-4723 · GHSA-7q4r-x5qg-mmcp

Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

MEDIUM 62

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00674 Published 2022-12-23 Fixed in 2.5.5 CWE-770

TI-2022-04318 CVE-2022-4722 · GHSA-wf33-6x33-wcf9

Authentication Bypass by Primary Weakness in ikus060/rdiffweb

HIGH 65

Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01206 Published 2022-12-23 Fixed in 2.5.5 CWE-305

TI-2022-04317 CVE-2022-4721 · GHSA-83pm-7v48-5jp4

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffweb

MEDIUM 58

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00517 Published 2022-12-23 Fixed in 2.5.5 CWE-75

TI-2022-04316 CVE-2022-4720 · GHSA-h5wp-jrqc-cwwx

Open Redirect in ikus060/rdiffweb

MEDIUM 60

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00514 Published 2022-12-23 Fixed in 2.5.5 CWE-601

TI-2022-04315 CVE-2022-4719 · GHSA-2wpw-cm9w-v4xm

Business Logic Errors in ikus060/rdiffweb

HIGH 75

Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01032 Published 2022-12-23 Fixed in 2.5.5 CWE-840

TI-2022-04246 CVE-2022-4646 · GHSA-85fp-523q-5xwc

Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb

MEDIUM 62

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0034 Published 2022-12-22 Fixed in 2.5.4 CWE-352

TI-2022-04244 CVE-2022-4644 · GHSA-639f-hxcv-84mc

Open Redirect in ikus060/rdiffweb

MEDIUM 60

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0064 Published 2022-12-22 Fixed in 2.5.4 CWE-601

TI-2022-03952 CVE-2022-4314 · GHSA-g594-55mp-f6q8

Improper Privilege Management in ikus060/rdiffweb

HIGH 75

Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00843 Published 2022-12-06 Fixed in 2.5.2 CWE-269

TI-2022-03687 CVE-2022-4018 · GHSA-4wph-9vrm-6v3w

Missing Authentication for Critical Function in ikus060/rdiffweb

MEDIUM 53

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00881 Published 2022-11-16 Fixed in 2.5.0a6 CWE-306

TI-2022-03107 CVE-2022-3362 · GHSA-94qm-99qc-qwqj

Insufficient Session Expiration in ikus060/rdiffweb

HIGH 76

Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00954 Published 2022-11-14 Fixed in 2.5.0 CWE-613

TI-2022-03108 CVE-2022-3363 · GHSA-jw36-mrvg-j5fx

Business Logic Errors in ikus060/rdiffweb

HIGH 75

Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00998 Published 2022-10-26 Fixed in 2.5.0a7 CWE-840

TI-2022-03075 CVE-2022-3327 · GHSA-99j5-fvg3-54pm

Missing Authentication for Critical Function in ikus060/rdiffweb

HIGH 75

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0102 Published 2022-10-19 Fixed in 2.5.0a6, 2.5.0 CWE-306

TI-2022-03176 CVE-2022-3439 · GHSA-x8x2-wc2h-wc48

Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

HIGH 82

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00824 Published 2022-10-14 Fixed in 2.5.0 CWE-770

TI-2022-03192 CVE-2022-3457 · GHSA-824x-jcxf-hpfg

Origin Validation Error in ikus060/rdiffweb

MEDIUM 42

Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00437 Published 2022-10-13 Fixed in 2.5.0a5 CWE-346

TI-2022-03191 CVE-2022-3456 · GHSA-92gf-p376-6r9r

Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

HIGH 75

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00413 Published 2022-10-13 Fixed in 2.5.0 CWE-770

TI-2022-03175 CVE-2022-3438 · GHSA-8g9m-vv69-7j99

Open Redirect in ikus060/rdiffweb

LOW 28

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00675 Published 2022-10-10 Fixed in 2.5.0a4 CWE-601

TI-2022-03133 CVE-2022-3389 · GHSA-hrrm-895h-xh34

Path Traversal in ikus060/rdiffweb

LOW 36

Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0139 Published 2022-10-06 Fixed in 2.4.10 CWE-22

TI-2022-03120 CVE-2022-3376 · GHSA-7wr6-fj4x-893v

Weak Password Requirements in ikus060/rdiffweb

LOW 26

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00839 Published 2022-10-06 Fixed in 2.5.0a4, 2.5.0 CWE-521

TI-2022-03023 CVE-2022-3273 · GHSA-9g3v-v24q-jj5p

Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

MEDIUM 43

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00567 Published 2022-10-06 Fixed in 2.5.0a4, 2.5.0 CWE-770

TI-2022-03115 CVE-2022-3371 · GHSA-3fhq-72hw-jqwv

Resource allocation without limits in ikus060/rdiffweb

HIGH 72

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01332 Published 2022-09-30 Fixed in 2.5.0a3 CWE-770

TI-2022-03109 CVE-2022-3364 · GHSA-fqfg-c577-2vc3

Resource allocation without limits in ikus060/rdiffweb

HIGH 72

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01169 Published 2022-09-29 Fixed in 2.5.0a3 CWE-770

TI-2022-03074 CVE-2022-3326 · GHSA-8wxf-c45w-g66g

Weak Password Requirements in ikus060/rdiffweb

MEDIUM 53

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00703 Published 2022-09-28 Fixed in 2.4.9 CWE-521

Vulnerabilities

Filters