Origin Validation Error in rdiffweb

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-3457 · ADVISORY
• ikus060/rdiffweb commit afc1bdf · WEB
• developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Origin · WEB
• ikus060/rdiffweb · PACKAGE
• pypa/advisory-database · WEB
• huntr.dev/bounties/cfcab02e-d6ad-4dcf-b1b0-da90434bc55b · WEB
• GitHub Advisory GHSA-824x-jcxf-hpfg · ADVISORY

rdiffweb のその他の脆弱性

• CVE-2025-67796高 8.1IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other…
• CVE-2023-5289高 8.8Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.
• CVE-2023-4138中 6.5Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0.
• CVE-2022-4724緊急 9.8Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.
• CVE-2022-4723中 6.5Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.