rdiffweb vulnerabilities (PyPI)

43 vulnerabilities.

• rdiffweb PyPI IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other users CVE-2025-67796 Fix available 8.1 HighMay 4, 2026
• rdiffweb PyPI Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2023-5289 Fix available 7.1 HighSeptember 29, 2023
• rdiffweb PyPI Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2023-4138 Fix available 4.2 MediumAugust 3, 2023
• rdiffweb PyPI Improper Access Control in ikus060/rdiffweb CVE-2022-4724 Fix available 8.4 HighDecember 23, 2022
• rdiffweb PyPI Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2022-4723 Fix available 6.3 MediumDecember 23, 2022
• rdiffweb PyPI Authentication Bypass by Primary Weakness in ikus060/rdiffweb CVE-2022-4722 Fix available 7.2 HighDecember 23, 2022
• rdiffweb PyPI Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffweb CVE-2022-4721 Fix available 6.6 MediumDecember 23, 2022
• rdiffweb PyPI Open Redirect in ikus060/rdiffweb CVE-2022-4720 Fix available 6.1 MediumDecember 23, 2022
• rdiffweb PyPI Business Logic Errors in ikus060/rdiffweb CVE-2022-4719 Fix available 5.7 MediumDecember 23, 2022
• rdiffweb PyPI Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb CVE-2022-4646 Fix available 5.3 MediumDecember 22, 2022
• rdiffweb PyPI Open Redirect in ikus060/rdiffweb CVE-2022-4644 Fix available 5.9 MediumDecember 22, 2022
• rdiffweb PyPI Improper Privilege Management in ikus060/rdiffweb CVE-2022-4314 Fix available 6.0 MediumDecember 6, 2022
• rdiffweb PyPI Missing Authentication for Critical Function in ikus060/rdiffweb CVE-2022-4018 Fix available 6.1 MediumNovember 16, 2022
• rdiffweb PyPI Insufficient Session Expiration in ikus060/rdiffweb CVE-2022-3362 Fix available 6.1 MediumNovember 14, 2022
• rdiffweb PyPI Business Logic Errors in ikus060/rdiffweb CVE-2022-3363 Fix available 2.8 LowOctober 26, 2022
• rdiffweb PyPI Missing Authentication for Critical Function in ikus060/rdiffweb CVE-2022-3327 Fix available 4.5 MediumOctober 19, 2022
• rdiffweb PyPI Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2022-3439 Fix available 4.5 MediumOctober 14, 2022
• rdiffweb PyPI Origin Validation Error in ikus060/rdiffweb CVE-2022-3457 Fix available 3.7 LowOctober 13, 2022
• rdiffweb PyPI Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2022-3456 Fix available 5.6 MediumOctober 13, 2022
• rdiffweb PyPI Open Redirect in ikus060/rdiffweb CVE-2022-3438 Fix available 5.7 MediumOctober 10, 2022
• rdiffweb PyPI Path Traversal in ikus060/rdiffweb CVE-2022-3389 Fix available 8.2 HighOctober 6, 2022
• rdiffweb PyPI Weak Password Requirements in ikus060/rdiffweb CVE-2022-3376 Fix available 3.5 LowOctober 6, 2022
• rdiffweb PyPI Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2022-3273 Fix available 3.6 LowOctober 6, 2022
• rdiffweb PyPI No limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb CVE-2022-3371 Fix available 7.5 HighSeptember 30, 2022
• rdiffweb PyPI No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb CVE-2022-3364 Fix available 5.3 MediumSeptember 29, 2022
• rdiffweb PyPI Weak Password Requirements in ikus060/rdiffweb CVE-2022-3326 Fix available 5.4 MediumSeptember 28, 2022
• rdiffweb PyPI Use of Cache Containing Sensitive Information in ikus060/rdiffweb CVE-2022-3292 Fix available 4.3 MediumSeptember 28, 2022
• rdiffweb PyPI Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2022-3298 Fix available 5.3 MediumSeptember 26, 2022
• rdiffweb PyPI Improper Handling of Length Parameter Inconsistency in ikus060/rdiffweb CVE-2022-3290 Fix available 5.7 MediumSeptember 26, 2022
• rdiffweb PyPI Improper Handling of Length Parameter Inconsistency in ikus060/rdiffweb CVE-2022-3272 Fix available 5.3 MediumSeptember 26, 2022
• rdiffweb PyPI Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2022-3295 Fix available 5.3 MediumSeptember 26, 2022
• rdiffweb PyPI Improper Cleanup on Thrown Exception in ikus060/rdiffweb CVE-2022-3301 Fix available 4.3 MediumSeptember 26, 2022
• rdiffweb PyPI Session Fixation in ikus060/rdiffweb CVE-2022-3269 Fix available 6.4 MediumSeptember 23, 2022
• rdiffweb PyPI Cross-Site Request Forgery (CSRF) on user's settings in GitHub repository ikus060/rdiffweb prior to 2.4.6. in ikus060/rdiffweb CVE-2022-3274 Fix available 7.0 HighSeptember 22, 2022
• rdiffweb PyPI Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb CVE-2022-3267 Fix available 6.8 MediumSeptember 22, 2022
• rdiffweb PyPI Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb CVE-2022-3233 Fix available 4.3 MediumSeptember 21, 2022
• rdiffweb PyPI Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb CVE-2022-3250 Fix available 4.9 MediumSeptember 21, 2022
• rdiffweb PyPI Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb CVE-2022-3232 Fix available 6.5 MediumSeptember 17, 2022
• rdiffweb PyPI Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb CVE-2022-3221 Fix available 8.8 HighSeptember 15, 2022
• rdiffweb PyPI Weak Password Requirements in ikus060/rdiffweb CVE-2022-3179 Fix available 7.1 HighSeptember 13, 2022
• rdiffweb PyPI Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb CVE-2022-3174 Fix available 7.5 HighSeptember 13, 2022
• rdiffweb PyPI Missing Custom Error Page in ikus060/rdiffweb CVE-2022-3175 Fix available 5.3 MediumSeptember 13, 2022
• rdiffweb PyPI Improper Restriction of Rendered UI Layers or Frames in ikus060/rdiffweb CVE-2022-3167 Fix available 10.0 CriticalSeptember 8, 2022