Known vulnerabilities in Rdiffweb
Vendor:
Patrik Dufresne
Software:
Rdiffweb
Software CPE:
cpe:2.3:a:ikus060:rdiffweb:*:*:*:*:*:*:*:*
Website:
https://github.com/ikus060
Total vulnerabilities:
6
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
8.8
Breakdown by Severity Chart
7.1.0
7.0.1
7.0.0
2.11.5
2.11.4
2.11.3
2.11.2
2.11.1
2.11.0
2.10.6
2.10.5
2.10.4
2.9.7
2.9.6
2.9.5
2.9.4
2.9.3
2.9.2
2.9.1
2.8.9
2.8.8
2.8.7
2.8.6
2.8.5
2.8.4
2.8.3
2.8.2
2.8.1
2.8.0
2.7.1
2.7.0
2.6.1
2.6.0
2.5.8
2.5.7
2.5.6
2.5.5
2.5.4
2.5.3
2.5.2
2.5.1
2.5.0
2.4.11
2.5.0a3
2.4.10
2.4.9
2.4.8
2.4.7
2.4.6
2.4.5
2.4.4
2.4.3
2.4.2
2.4.1
2.4.0
2.3.9
2.3.8
2.3.7
2.3.6
2.3.5
2.3.4
2.3.3
2.3.2
2.3.1
2.3.0
2.2.1
2.1.0
2.0.2
2.0.1
2.0.0
1.5.0
1.4.0
1.3.2
1.3.1
1.3.0
1.2.2
1.2.1
1.2.0
1.1.0
1.0.3
1.0.2
1.0.1
1.0.0
0.10.9
0.10.8
0.10.7
0.10.6
0.10.5
0.10.4
0.10.2
0.10.0
0.9.5
0.9.4
0.9.3
0.9.2
0.9.1
0.8.3
0.8.2
0.8.1
0.7.2
0.7.1
0.7.0
0.6.5
0.6.4
Vulnerabilities (6)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU67903 - Allocation of Resources Without Limits or Throttling CVE-2022-3364 |
CWE-770 | Medium | 2.5.0a3 | 04.10.2022 |
SB2022100427 |
||
| #VU67902 - Allocation of Resources Without Limits or Throttling CVE-2022-3371 |
CWE-770 | Medium | 2.5.0a3 | 04.10.2022 |
SB2022100427 |
||
| #VU67649 - Cross-Site Request Forgery (CSRF) CVE-2022-3232 |
CWE-352 | Low | 2.4.5 | 26.09.2022 |
SB2022092620 |
||
| #VU67648 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute CVE-2022-3250 |
CWE-614 | Medium | 2.4.6 | 26.09.2022 |
SB2022092621 |
||
| #VU67647 - Cross-Site Request Forgery (CSRF) CVE-2022-3233 |
CWE-352 | Low | 2.4.6 | 26.09.2022 |
SB2022092621 |
||
| #VU67494 - Cross-Site Request Forgery (CSRF) CVE-2022-3221 |
CWE-352 | Low | 2.4.3 | 20.09.2022 |
SB2022092024 |