Vulnerabilities

TI-2022-04320 CVE-2022-4724 · GHSA-m8r9-qxx8-mrxp

Improper Access Control in ikus060/rdiffweb

HIGH 75

Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00883 Published 2022-12-23 Fixed in 2.5.5 CWE-284

TI-2022-04319 CVE-2022-4723 · GHSA-7q4r-x5qg-mmcp

MEDIUM 62

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00674 Published 2022-12-23 Fixed in 2.5.5 CWE-770

TI-2022-04318 CVE-2022-4722 · GHSA-wf33-6x33-wcf9

HIGH 65

Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01206 Published 2022-12-23 Fixed in 2.5.5 CWE-305

TI-2022-04317 CVE-2022-4721 · GHSA-83pm-7v48-5jp4

MEDIUM 58

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00517 Published 2022-12-23 Fixed in 2.5.5 CWE-75

TI-2022-04316 CVE-2022-4720 · GHSA-h5wp-jrqc-cwwx

MEDIUM 60

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00514 Published 2022-12-23 Fixed in 2.5.5 CWE-601

TI-2022-04315 CVE-2022-4719 · GHSA-2wpw-cm9w-v4xm

HIGH 75

Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01032 Published 2022-12-23 Fixed in 2.5.5 CWE-840