Rdiffweb subject to Business Logic Errors

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-3363 · ADVISORY
• ikus060/rdiffweb commit c27c46b · WEB
• ikus060/rdiffweb · WEB
• pypa/advisory-database · WEB
• huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e · WEB
• huntr.com/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e
• GitHub Advisory GHSA-jw36-mrvg-j5fx · ADVISORY

Autres vulnérabilités de rdiffweb

• CVE-2025-67796ÉLEVÉE 8.1IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other…
• CVE-2023-5289ÉLEVÉE 8.8Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.
• CVE-2023-4138MOYENNE 6.5Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0.
• CVE-2022-4724CRITIQUE 9.8Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.
• CVE-2022-4723MOYENNE 6.5Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.