| IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other usersCVE-2025-67796 · GHSA-V4GP-HF5J-4566Version ranges need review. |
rdiffweb |
PyPI |
High
|
Fix reported |
|
| rdiffweb's unlimited username field length can lead to DoSCVE-2022-3290 · GHSA-5V95-J4RR-6F3CVersion ranges need review. |
rdiffweb |
PyPI |
High
|
Fix reported |
|
| RDiffWeb vulnerable to Allocation of Resources Without Limits or ThrottlingCVE-2023-4138 · GHSA-WWRG-2W5J-GRVXVersion ranges need review. |
rdiffweb |
PyPI |
Medium
|
Fix reported |
|
| Rdiffweb Allocation of Resources Without Limits or Throttling vulnerabilityCVE-2023-5289 · GHSA-C4RV-2J6X-PQ7XVersion ranges need review. |
rdiffweb |
PyPI |
High
|
Fix reported |
|
| Origin Validation Error in rdiffwebCVE-2022-3457 · GHSA-824X-JCXF-HPFGVersion ranges need review. |
rdiffweb |
PyPI |
Critical
|
Fix reported |
|
| Improper Privilege Management in rdiffwebCVE-2022-4314 · GHSA-G594-55MP-F6Q8Version ranges need review. |
rdiffweb |
PyPI |
Critical
|
Fix reported |
|
| Rdiffweb vulnerable to Missing Authentication for Critical FunctionCVE-2022-4018 · GHSA-4WPH-9VRM-6V3WVersion ranges need review. |
rdiffweb |
PyPI |
Low
|
Fix reported |
|
| rdiffweb vulnerable to Cross-Site Request ForgeryCVE-2022-4646 · GHSA-85FP-523Q-5XWCVersion ranges need review. |
rdiffweb |
PyPI |
High
|
Fix reported |
|
| rdiffweb vulnerable to Business Logic ErrorsCVE-2022-4719 · GHSA-2WPW-CM9W-V4XMVersion ranges need review. |
rdiffweb |
PyPI |
Medium
|
Fix reported |
|
| rdiffweb vulnerable to Special Element InjectionCVE-2022-4721 · GHSA-83PM-7V48-5JP4Version ranges need review. |
rdiffweb |
PyPI |
Medium
|
Fix reported |
|
| rdiffweb vulnerable to Open RedirectCVE-2022-4720 · GHSA-H5WP-JRQC-CWWXVersion ranges need review. |
rdiffweb |
PyPI |
High
|
Fix reported |
|
| rdiffweb vulnerable to Authentication Bypass by Primary WeaknessCVE-2022-4722 · GHSA-WF33-6X33-WCF9Version ranges need review. |
rdiffweb |
PyPI |
High
|
Fix reported |
|
| rdiffweb vulnerable to Open RedirectCVE-2022-3438 · GHSA-8G9M-VV69-7J99Version ranges need review. |
rdiffweb |
PyPI |
Medium
|
Fix reported |
|
| rdiffweb allows a new password to be the same as the previous passwordCVE-2022-3376 · GHSA-7WR6-FJ4X-893VVersion ranges need review. |
rdiffweb |
PyPI |
Medium
|
Fix reported |
|
| Missing rate limit on rdiffwebCVE-2022-3456 · GHSA-92GF-P376-6R9RVersion ranges need review. |
rdiffweb |
PyPI |
Medium
|
Fix reported |
|
| Missing rate limit on rdiffwebCVE-2022-3439 · GHSA-X8X2-WC2H-WC48Version ranges need review. |
rdiffweb |
PyPI |
Critical
|
Fix reported |
|
| rdiffweb Improper Access Control vulnerabilityCVE-2022-4724 · GHSA-M8R9-QXX8-MRXPVersion ranges need review. |
rdiffweb |
PyPI |
Critical
|
Fix reported |
|
| rdiffweb Cross-Site Request Forgery vulnerabilityCVE-2022-3267 · GHSA-74J6-3HH4-W3F5Version ranges need review. |
rdiffweb |
PyPI |
Medium
|
Fix reported |
|
| rdiffweb Cross-Site Request Forgery vulnerability can lead to user email ID being changedCVE-2022-3274 · GHSA-GMJ8-84R4-H46JVersion ranges need review. |
rdiffweb |
PyPI |
High
|
Fix reported |
|
| rdiffweb vulnerable to account access via session fixationCVE-2022-3269 · GHSA-J3Q4-GMJ4-MJ95Version ranges need review. |
rdiffweb |
PyPI |
Critical
|
Fix reported |
|
