| CVE-2025-67796 | ALTO8.1 | IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authenticated subject and the targeted user/tenant, so crafted requests can read or modify other users data and, in some cases, | 04/05/2026 |
| CVE-2023-5289 | ALTO8.8 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4. | 29/09/2023 |
| CVE-2023-4138 | MÉDIO6.5 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0. | 03/08/2023 |
| CVE-2022-4724 | CRÍTICO9.8 | Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5. | 27/12/2022 |
| CVE-2022-4723 | MÉDIO6.5 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5. | 27/12/2022 |
| CVE-2022-4722 | ALTO7.2 | Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5. | 27/12/2022 |
| CVE-2022-4721 | MÉDIO5.4 | Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5. | 27/12/2022 |
| CVE-2022-4720 | MÉDIO6.1 | Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5. | 27/12/2022 |
| CVE-2022-4719 | CRÍTICO9.8 | Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5. | 27/12/2022 |
| CVE-2022-4646 | MÉDIO6.5 | Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4. | 22/12/2022 |
| CVE-2022-4644 | MÉDIO6.1 | Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4. | 22/12/2022 |
| CVE-2022-4314 | CRÍTICO9.8 | Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2. | 12/12/2022 |
| CVE-2022-4018 | MÉDIO4.3 | Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6. | 16/11/2022 |
| CVE-2022-3362 | CRÍTICO9.8 | Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0. | 14/11/2022 |
| CVE-2022-3363 | CRÍTICO9.8 | Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7. | 26/10/2022 |
| CVE-2022-3327 | CRÍTICO9.8 | Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6. | 20/10/2022 |
| CVE-2022-3439 | CRÍTICO9.8 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0. | 14/10/2022 |
| CVE-2022-3457 | CRÍTICO9.8 | Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5. | 13/10/2022 |
| CVE-2022-3456 | CRÍTICO9.8 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0. | 13/10/2022 |
| CVE-2022-3438 | MÉDIO6.1 | Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. | 10/10/2022 |