PyPIPackage

rdiffweb

43 known vulnerabilities (1 critical, 10 high, 28 medium, 4 low), with the versions each affects and the releases that fix them.

Latest release: Not known: cve.now hasn't read this package's releases
Newest unaffected release: Not known without release data
Advisories: 43 · 1 critical, 10 high, 28 medium, 4 low

Weekly downloads: 692
Dependents: 0
Registry: PyPI

Advisories 43

CVE-2025-67796High 8.1
IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as…
Affected: fixed in 2.10.6.
CVE-2023-5289High 7.1
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Affected: fixed in 2.8.4; fixed in 2.8.4.
CVE-2023-4138Medium 4.2
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Affected: fixed in 2.8.1.
CVE-2022-4724High 8.4
Improper Access Control in ikus060/rdiffweb
Affected: fixed in 2.5.5; fixed in 2.5.5.
CVE-2022-4723Medium 6.3
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Affected: fixed in 2.5.5; fixed in 2.5.5.
CVE-2022-4722High 7.2
Authentication Bypass by Primary Weakness in ikus060/rdiffweb
Affected: fixed in 2.5.5; fixed in 2.5.5.
CVE-2022-4721Medium 6.6
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffweb
Affected: fixed in 2.5.5; fixed in 2.5.5.
CVE-2022-4720Medium 6.1
Open Redirect in ikus060/rdiffweb
Affected: fixed in 2.5.5; fixed in 2.5.5.
CVE-2022-4719Medium 5.7
Business Logic Errors in ikus060/rdiffweb
Affected: fixed in 2.5.5; fixed in 2.5.5.
CVE-2022-4646Medium 5.3
Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb
Affected: fixed in 2.5.4; fixed in 2.5.4.
CVE-2022-4644Medium 5.9
Open Redirect in ikus060/rdiffweb
Affected: fixed in 2.5.4; fixed in 2.5.4.
CVE-2022-4314Medium 6.0
Improper Privilege Management in ikus060/rdiffweb
Affected: fixed in 2.5.2; fixed in 2.5.2.
CVE-2022-4018Medium 6.1
Missing Authentication for Critical Function in ikus060/rdiffweb
Affected: fixed in 2.4.11a1; fixed in 2.5.0a6.
CVE-2022-3362Medium 6.1
Insufficient Session Expiration in ikus060/rdiffweb
Affected: fixed in 2.5.0; fixed in 2.5.0.
CVE-2022-3363Low 2.8
Business Logic Errors in ikus060/rdiffweb
Affected: fixed in 2.5.0; fixed in 2.5.0a7.

Show all 43 advisoriesShow fewer advisories

CVE-2022-3327Medium 4.5
Missing Authentication for Critical Function in ikus060/rdiffweb
Affected: fixed in 2.4.10; fixed in 2.5.0.
CVE-2022-3439Medium 4.5
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Affected: fixed in 2.5.0; fixed in 2.5.0.
CVE-2022-3457Low 3.7
Origin Validation Error in ikus060/rdiffweb
Affected: fixed in 2.5.0a5; fixed in 2.5.0.
CVE-2022-3456Medium 5.6
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Affected: fixed in 2.5.0; fixed in 2.5.0.
CVE-2022-3438Medium 5.7
Open Redirect in ikus060/rdiffweb
Affected: fixed in 2.5.0; fixed in 2.5.0a4.
CVE-2022-3389High 8.2
Path Traversal in ikus060/rdiffweb
Affected: fixed in 2.4.10; fixed in 2.4.10.
CVE-2022-3376Low 3.5
Weak Password Requirements in ikus060/rdiffweb
Affected: fixed in 2.4.11a1; fixed in 2.5.0.
CVE-2022-3273Low 3.6
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Affected: fixed in 2.5.0; fixed in 2.4.11a1.
CVE-2022-3371High 7.5
No limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in…
Affected: fixed in 2.5.0a3; fixed in 2.4.10.
CVE-2022-3364Medium 5.3
No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb
Affected: fixed in 2.4.10; fixed in 2.5.0a3.
CVE-2022-3326Medium 5.4
Weak Password Requirements in ikus060/rdiffweb
Affected: fixed in 2.4.9; fixed in 2.4.9.
CVE-2022-3292Medium 4.3
Use of Cache Containing Sensitive Information in ikus060/rdiffweb
Affected: fixed in 2.4.9; fixed in 2.4.8.
CVE-2022-3298Medium 5.3
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Affected: fixed in 2.4.8; fixed in 2.4.8.
CVE-2022-3290Medium 5.7
Improper Handling of Length Parameter Inconsistency in ikus060/rdiffweb
Affected: fixed in 2.4.8; fixed in 2.4.8.
CVE-2022-3272Medium 5.3
Improper Handling of Length Parameter Inconsistency in ikus060/rdiffweb
Affected: fixed in 2.4.8; fixed in 2.4.8.
CVE-2022-3295Medium 5.3
Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb
Affected: fixed in 2.4.8; fixed in 2.4.8.
CVE-2022-3301Medium 4.3
Improper Cleanup on Thrown Exception in ikus060/rdiffweb
Affected: fixed in 2.4.8; fixed in 2.4.8.
CVE-2022-3269Medium 6.4
Session Fixation in ikus060/rdiffweb
Affected: fixed in 2.4.7; fixed in 2.4.7.
CVE-2022-3274High 7.0
Cross-Site Request Forgery (CSRF) on user's settings in GitHub repository ikus060/rdiffweb prior to 2.4.6. in ikus060/rdiffweb
Affected: fixed in 2.4.7; fixed in 2.4.7.
CVE-2022-3267Medium 6.8
Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb
Affected: fixed in 2.4.6; fixed in 2.4.6.
CVE-2022-3233Medium 4.3
Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb
Affected: fixed in 2.4.6; fixed in 2.4.6.
CVE-2022-3250Medium 4.9
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb
Affected: fixed in 2.4.6; fixed in 2.4.6.
CVE-2022-3232Medium 6.5
Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb
Affected: fixed in 2.4.5; fixed in 2.4.5.
CVE-2022-3221High 8.8
Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb
Affected: fixed in 2.4.3.
CVE-2022-3179High 7.1
Weak Password Requirements in ikus060/rdiffweb
Affected: from 2.4.1, fixed in 2.4.2; fixed in 2.4.2.
CVE-2022-3174High 7.5
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb
Affected: from 2.4.1, fixed in 2.4.2; fixed in 2.4.2.
CVE-2022-3175Medium 5.3
Missing Custom Error Page in ikus060/rdiffweb
Affected: from 2.4.1, fixed in 2.4.2; fixed in 2.4.2.
CVE-2022-3167Critical 10.0
Improper Restriction of Rendered UI Layers or Frames in ikus060/rdiffweb
Affected: fixed in 2.4.1.