GHSA-3fhq-72hw-jqwvHighCVSS 7.5

rdiffweb's lack of token name length limit can result in DoS or memory corruption

Published
October 1, 2022
Last Modified
October 25, 2024

🔗 CVE IDs covered (1)

CVE-2022-3371 →

📋 Description

rdiffweb prior to 2.5.0a3 is vulnerable to Allocation of Resources Without Limits or Throttling. A lack of limit in the length of the Token name parameter can result in denial of service or memory corruption. Version 2.5.0a3 fixes this issue.

🎯 Affected products1

  • pip/rdiffweb:< 2.5.0a3

🔗 References (5)