| Package | Affected versions | Patched versions |
|---|---|---|
| rdiffweb | < 2.4.11a1< 2.5.0 | 2.4.11a12.5.0 |
| rdiffweb | = 2.5.0≤ 2.4.10 |
rdiffweb prior to 2.5.0a4 does not have a rate limit to prevent attackers attempting brute force attacks to guess passwords. Version 2.5.0a4 limits the number of incorrect password attempts.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free