rdiffweb

PyPI43 known CVEs affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting rdiffwebpage 1 of 1

CVE-2022-3167HIGHCVSS 8.8EG 8.8fixed in 2.4.1
2022-09-08
vulnerable: 0.10.0 ... 2.4.0 (74 versions)
Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1.
CVE-2022-3174HIGHCVSS 7.5EG 7.5fixed in 2.4.2
2022-09-13
vulnerable: 0.10.0 ... 2.4.1 (75 versions)
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.
CVE-2022-3175MEDIUMCVSS 5.3EG 5.3fixed in 2.4.2
2022-09-13
vulnerable: 0.10.0 ... 2.4.1 (75 versions)
Missing Custom Error Page in GitHub repository ikus060/rdiffweb prior to 2.4.2.
CVE-2022-3179HIGHCVSS 8.8EG 8.8fixed in 2.4.2
2022-09-13
vulnerable: 0.10.0 ... 2.4.1 (75 versions)
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2.
CVE-2022-3221HIGHCVSS 8.8EG 8.8fixed in 2.4.3
2022-09-15
vulnerable: 0.10.0 ... 2.4.2 (76 versions)
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3.
CVE-2022-3232MEDIUMCVSS 4.3EG 4.3fixed in 2.4.5
2022-09-17
vulnerable: 0.10.0 ... v0.6.4 (87 versions)
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5.
CVE-2022-3233MEDIUMCVSS 4.3EG 4.3fixed in 2.4.6
2022-09-21
vulnerable: 0.10.0 ... v0.6.4 (88 versions)
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.
CVE-2022-3250MEDIUMCVSS 5.3EG 5.3fixed in 2.4.6
2022-09-21
vulnerable: 0.10.0 ... v0.6.4 (88 versions)
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.
CVE-2022-3267MEDIUMCVSS 4.3EG 4.3fixed in 2.4.6
2022-09-22
vulnerable: 0.10.0 ... v0.6.4 (88 versions)
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.
CVE-2022-3269CRITICALCVSS 9.8EG 9.8fixed in 2.4.7
2022-09-23
vulnerable: 0.10.0 ... v0.6.4 (89 versions)
Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7.
CVE-2022-3272HIGHCVSS 7.5EG 7.5fixed in 2.4.8
2022-09-26
vulnerable: 0.10.0 ... v0.6.4 (90 versions)
Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3273CRITICALCVSS 9.8EG 9.8fixed in 2.5.0 or 2.4.11a1, by version range
2022-10-06
vulnerable: 0.10.0 ... v0.6.4 (93 versions)
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
CVE-2022-3274LOWCVSS 3.5EG 3.5fixed in 2.4.7
2022-09-22
vulnerable: 0.10.0 ... v0.6.4 (89 versions)
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.
CVE-2022-3290HIGHCVSS 7.5EG 7.5fixed in 2.4.8
2022-09-26
vulnerable: 0.10.0 ... v0.6.4 (90 versions)
Improper Handling of Length Parameter Inconsistency in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3292MEDIUMCVSS 4.6EG 4.6fixed in 2.4.9 or 2.4.8, by version range
2022-09-28
vulnerable: 0.10.0 ... v0.6.4 (91 versions)
Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3295HIGHCVSS 7.5EG 7.5fixed in 2.4.8
2022-09-26
vulnerable: 0.10.0 ... v0.6.4 (90 versions)
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3298HIGHCVSS 7.5EG 7.5fixed in 2.4.8
2022-09-26
vulnerable: 0.10.0 ... v0.6.4 (90 versions)
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3301LOWCVSS 2.4EG 2.4fixed in 2.4.8
2022-09-26
vulnerable: 0.10.0 ... v0.6.4 (90 versions)
Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.
CVE-2022-3326MEDIUMCVSS 4.3EG 4.3fixed in 2.4.9
2022-09-29
vulnerable: 0.10.0 ... v0.6.4 (91 versions)
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.9.
CVE-2022-3327CRITICALCVSS 9.8EG 9.8fixed in 2.5.0 or 2.4.10, by version range
2022-10-20
vulnerable: 0.10.0 ... v0.6.4 (92 versions)
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
CVE-2022-3362CRITICALCVSS 9.8EG 9.8fixed in 2.5.0
2022-11-14
vulnerable: 0.10.0 ... v0.6.4 (98 versions)
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.
CVE-2022-3363CRITICALCVSS 9.8EG 9.8fixed in 2.5.0a7 or 2.5.0, by version range
2022-10-26
vulnerable: 0.10.0 ... v0.6.4 (98 versions)
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.
CVE-2022-3364HIGHCVSS 7.5EG 7.5fixed in 2.5.0a3 or 2.4.10, by version range
2022-09-29
vulnerable: 0.10.0 ... v0.6.4 (92 versions)
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.
CVE-2022-3371HIGHCVSS 7.5EG 7.5fixed in 2.5.0a3 or 2.4.10, by version range
2022-09-30
vulnerable: 0.10.0 ... v0.6.4 (92 versions)
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.
CVE-2022-3376MEDIUMCVSS 5.3EG 5.3fixed in 2.5.0 or 2.4.11a1, by version range
2022-10-06
vulnerable: 0.10.0 ... v0.6.4 (93 versions)
Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
CVE-2022-3389HIGHCVSS 7.5EG 7.5fixed in 2.4.10
2022-10-06
vulnerable: 0.10.0 ... v0.6.4 (92 versions)
Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10.
CVE-2022-3438MEDIUMCVSS 6.1EG 6.1fixed in 2.5.0a4 or 2.5.0, by version range
2022-10-10
vulnerable: 0.10.0 ... v0.6.4 (98 versions)
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
CVE-2022-3439CRITICALCVSS 9.8EG 9.8fixed in 2.5.0
2022-10-14
vulnerable: 0.10.0 ... v0.6.4 (98 versions)
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
CVE-2022-3456CRITICALCVSS 9.8EG 9.8fixed in 2.5.0
2022-10-13
vulnerable: 0.10.0 ... v0.6.4 (98 versions)
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
CVE-2022-3457CRITICALCVSS 9.8EG 9.8fixed in 2.5.0a5 or 2.5.0, by version range
2022-10-13
vulnerable: 0.10.0 ... v0.6.4 (98 versions)
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5.
CVE-2022-4018MEDIUMCVSS 4.3EG 4.3fixed in 2.5.0a6 or 2.4.11a1, by version range
2022-11-16
vulnerable: 0.10.0 ... v0.6.4 (93 versions)
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
CVE-2022-4314CRITICALCVSS 9.8EG 9.8fixed in 2.5.2
2022-12-12
vulnerable: 0.10.0 ... v0.6.4 (100 versions)
Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.
CVE-2022-4644MEDIUMCVSS 6.1EG 6.1fixed in 2.5.4
2022-12-22
vulnerable: 0.10.0 ... v0.6.4 (103 versions)
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.
CVE-2022-4646MEDIUMCVSS 6.5EG 6.5fixed in 2.5.4
2022-12-22
vulnerable: 0.10.0 ... v0.6.4 (103 versions)
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.
CVE-2022-4719CRITICALCVSS 9.8EG 9.8fixed in 2.5.5
2022-12-27
vulnerable: 0.10.0 ... v0.6.4 (104 versions)
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVE-2022-4720MEDIUMCVSS 6.1EG 6.1fixed in 2.5.5
2022-12-27
vulnerable: 0.10.0 ... v0.6.4 (104 versions)
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVE-2022-4721MEDIUMCVSS 5.4EG 5.4fixed in 2.5.5
2022-12-27
vulnerable: 0.10.0 ... v0.6.4 (104 versions)
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVE-2022-4722HIGHCVSS 7.2EG 7.2fixed in 2.5.5
2022-12-27
vulnerable: 0.10.0 ... v0.6.4 (104 versions)
Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVE-2022-4723MEDIUMCVSS 6.5EG 6.5fixed in 2.5.5
2022-12-27
vulnerable: 0.10.0 ... v0.6.4 (104 versions)
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVE-2022-4724CRITICALCVSS 9.8EG 9.8fixed in 2.5.5
2022-12-27
vulnerable: 0.10.0 ... v0.6.4 (104 versions)
Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.
CVE-2023-4138MEDIUMCVSS 6.5EG 6.5fixed in 2.8.1
2023-08-03
vulnerable: 0.10.0 ... 2.8.0a9 (119 versions)
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0.
CVE-2023-5289HIGHCVSS 8.8EG 8.8fixed in 2.8.4
2023-09-29
vulnerable: 0.10.0 ... v0.6.4 (133 versions)
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.
CVE-2025-67796HIGHCVSS 8.1EG 8.1fixed in 2.10.6
2026-05-04
vulnerable: 0.10.0 ... 2.9.7 (144 versions)
IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authenticated subject and the targeted user/te…

Check whether rdiffweb is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for rdiffweb CVEs against the assets you own.

Book a Demo →