Priority MEDIUM 40
Improper Privilege Management in the user management API endpoint (/api/users/{username_or_id}) in Rdiffweb allows authenticated users to elevate their privileges to administrator by modifying the role parameter in a POS…
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.0038 · Published 2026-10-16 · Fixed in 2.10.6 CWE-862
Priority LOW 21
Improper path containment check in ikus060 rdiffweb 7.1.1 allows an authenticated user to cause the browse, restore, history and delete operations to resolve to a path outside the repository being operated on, via a perc…
CVSS 3.1MEDIUM 4.6· Network · Low privileges · User interaction · EPSS 0.00229 · Published 2026-10-16 · Fixed in 7.1.1 CWE-22
Priority HIGH 71
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00775 · Published 2023-09-29 · Fixed in 2.8.4 CWE-770
Priority MEDIUM 62
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00448 · Published 2023-08-03 · Fixed in 2.8.0, 2.8.1 CWE-770
Priority HIGH 75
Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00883 · Published 2022-12-23 · Fixed in 2.5.5 CWE-284
Priority MEDIUM 62
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00674 · Published 2022-12-23 · Fixed in 2.5.5 CWE-770
Priority HIGH 65
Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01206 · Published 2022-12-23 · Fixed in 2.5.5 CWE-305
Priority MEDIUM 58
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.00517 · Published 2022-12-23 · Fixed in 2.5.5 CWE-75
Priority MEDIUM 60
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00514 · Published 2022-12-23 · Fixed in 2.5.5 CWE-601
Priority HIGH 75
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01032 · Published 2022-12-23 · Fixed in 2.5.5 CWE-840
Priority MEDIUM 62
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.0034 · Published 2022-12-22 · Fixed in 2.5.4 CWE-352
Priority MEDIUM 60
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0064 · Published 2022-12-22 · Fixed in 2.5.4 CWE-601
Priority HIGH 75
Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00843 · Published 2022-12-06 · Fixed in 2.5.2 CWE-269
Priority MEDIUM 53
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00881 · Published 2022-11-16 · Fixed in 2.5.0a6 CWE-306
Priority HIGH 76
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00954 · Published 2022-11-14 · Fixed in 2.5.0 CWE-613
Priority HIGH 75
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00998 · Published 2022-10-26 · Fixed in 2.5.0a7 CWE-840
Priority HIGH 75
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0102 · Published 2022-10-19 · Fixed in 2.5.0a6, 2.5.0 CWE-306
Priority HIGH 82
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00824 · Published 2022-10-14 · Fixed in 2.5.0 CWE-770
Priority MEDIUM 42
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00437 · Published 2022-10-13 · Fixed in 2.5.0a5 CWE-346
Priority HIGH 75
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00413 · Published 2022-10-13 · Fixed in 2.5.0 CWE-770
Priority LOW 28
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00675 · Published 2022-10-10 · Fixed in 2.5.0a4 CWE-601
Priority LOW 36
Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0139 · Published 2022-10-06 · Fixed in 2.4.10 CWE-22
Priority LOW 26
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00839 · Published 2022-10-06 · Fixed in 2.5.0a4, 2.5.0 CWE-521
Priority MEDIUM 43
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00567 · Published 2022-10-06 · Fixed in 2.5.0a4, 2.5.0 CWE-770
Priority HIGH 72
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01332 · Published 2022-09-30 · Fixed in 2.5.0a3 CWE-770
Load more
THREATIST.IORead the docs