RDiffWeb vulnerable to Allocation of Resources Without Limits or Throttling

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-4138 · ADVISORY
• ikus060/rdiffweb commit feef0d7 · WEB
• ikus060/rdiffweb · PACKAGE
• huntr.dev/bounties/1b1fa915-d588-4bb1-9e82-6a6be79befed · WEB
• pypi.org/project/rdiffweb · PACKAGE
• GitHub Advisory GHSA-wwrg-2w5j-grvx · ADVISORY

More vulnerabilities in rdiffweb

• CVE-2025-67796HIGH 8.1IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other…
• CVE-2023-5289HIGH 8.8Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.
• CVE-2022-4724CRITICAL 9.8Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.
• CVE-2022-4723MEDIUM 6.5Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.
• CVE-2022-4722HIGH 7.2Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.