rdiffweb Cross-Site Request Forgery vulnerability can lead to user email ID being changed

낮음 3.5CVE-2022-3274 · GHSA-gmj8-84r4-h46j · PYSEC-2022-289 · Published 22/09/2022 · updated 17/06/2026

요약

CVE-2022-3274은(는) rdiffweb, rdiffweb (ikus-soft)에 영향을 주는 낮음 (CVSS 3.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.50%, 전체 취약점의 42.7%보다 높음.
조치: 2.4.7 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
rdiffweb PyPI	`< 2.4.7`	`2.4.7`
rdiffweb ikus-soft	`< 2.4.7`	`2.4.7`

Description

rdiffwen prior to version 2.4.7 is vulnerable to Cross-Site Request Forgery (CSRF). An attacker can change a user's email ID. Version 2.4.7 has a fix for this issue.

NVD description

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.

References

nvd.nist.gov/vuln/detail/CVE-2022-3274 · ADVISORY
ikus060/rdiffweb commit e974df7 · WEB
ikus060/rdiffweb · PACKAGE
pypa/advisory-database · WEB
huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f · WEB
GitHub Advisory GHSA-gmj8-84r4-h46j · ADVISORY

rdiffweb의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

rdiffweb

PyPI

< 2.4.7

2.4.7

rdiffweb

ikus-soft

< 2.4.7

2.4.7

rdiffweb의 다른 취약점

모두 보기 →