What is GHSA-ch4c-278q-5654?

GHSA-ch4c-278q-5654 is a security advisory published by GitHub Security Advisories with Medium severity. rdiffweb Missing Custom Error Page

Which CVE IDs does GHSA-ch4c-278q-5654 cover?

GHSA-ch4c-278q-5654 covers the following CVE IDs: CVE-2022-3175. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-ch4c-278q-5654?

GHSA-ch4c-278q-5654 has a CVSS v3 base score of 5.3, published by GitHub Security Advisories.

Which products are affected by GHSA-ch4c-278q-5654?

GHSA-ch4c-278q-5654 affects 1 product, including: pip/rdiffweb:= 2.4.1.

GHSA-ch4c-278q-5654MediumCVSS 5.3

rdiffweb Missing Custom Error Page

Vendor

GitHub Security Advisories

Published

September 14, 2022

Last Modified

October 25, 2024

🔗 CVE IDs covered (1)

CVE-2022-3175 →

📋 Description

rdiffweb version 2.4.1 is set to a default and leaks error information. Version 2.4.2 fixes this issue.

🎯 Affected products1

pip/rdiffweb:= 2.4.1

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2022-3175
https://huntr.dev/bounties/c40badc3-c9e7-4b69-9e2e-2b9f05865159
https://github.com/ikus060/rdiffweb/blob/4d1232cd0586eb79d1a921969f8f7a198a00d92b/README.md?plain=1#L149
https://github.com/ikus060/rdiffweb/commit/233befc33bdc45d4838c773d5aed4408720504c5
https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-273.yaml
https://github.com/advisories/GHSA-ch4c-278q-5654