Rdiffweb Allocation of Resources Without Limits or Throttling vulnerability

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-5289 · ADVISORY
• ikus060/rdiffweb commit 06f89b4 · WEB
• ikus060/rdiffweb · PACKAGE
• pypa/advisory-database · WEB
• huntr.dev/bounties/8d0e0804-d3fd-49fe-bfa4-7a91135767ce · WEB
• GitHub Advisory GHSA-c4rv-2j6x-pq7x · ADVISORY

rdiffweb 的其他漏洞

• CVE-2025-67796高危 8.1IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other…
• CVE-2023-4138中危 6.5Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0.
• CVE-2022-4724严重 9.8Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.
• CVE-2022-4723中危 6.5Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.
• CVE-2022-4722高危 7.2Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.