| Package | Affected versions | Patched versions |
|---|---|---|
| rdiffweb | < 2.4.8 | 2.4.8 |
| rdiffweb | < 2.4.8 | 2.4.8 |
rdiffweb prior to 2.4.8 has no limit in length of root directory names. Allowing users to enter long strings may result in a DOS attack or memory corruption. Version 2.4.8 defines a field limit for username, email, and root directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free