Ikus-soft Rdiffweb vulnerabilities

• ikus-soft rdiffweb Missing Authorization in rdiffweb CVE-2026-109119 8.8 HighOctober 16, 2026
• ikus-soft rdiffweb Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in rdiffweb CVE-2026-109118 4.6 MediumOctober 16, 2026
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2023-5289 Fix available 7.1 HighSeptember 29, 2023
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2023-4138 Fix available 4.2 MediumAugust 3, 2023
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Improper Access Control in ikus060/rdiffweb CVE-2022-4724 Fix available 8.4 HighDecember 23, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2022-4723 Fix available 6.3 MediumDecember 23, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Authentication Bypass by Primary Weakness in ikus060/rdiffweb CVE-2022-4722 Fix available 7.2 HighDecember 23, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in ikus060/rdiffweb CVE-2022-4721 Fix available 6.6 MediumDecember 23, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Open Redirect in ikus060/rdiffweb CVE-2022-4720 Fix available 6.1 MediumDecember 23, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Business Logic Errors in ikus060/rdiffweb CVE-2022-4719 Fix available 5.7 MediumDecember 23, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb CVE-2022-4646 Fix available 5.3 MediumDecember 22, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Open Redirect in ikus060/rdiffweb CVE-2022-4644 Fix available 5.9 MediumDecember 22, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Improper Privilege Management in ikus060/rdiffweb CVE-2022-4314 Fix available 6.0 MediumDecember 6, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Missing Authentication for Critical Function in ikus060/rdiffweb CVE-2022-4018 Fix available 6.1 MediumNovember 16, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Insufficient Session Expiration in ikus060/rdiffweb CVE-2022-3362 Fix available 6.1 MediumNovember 14, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Business Logic Errors in ikus060/rdiffweb CVE-2022-3363 Fix available 2.8 LowOctober 26, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Missing Authentication for Critical Function in ikus060/rdiffweb CVE-2022-3327 Fix available 4.5 MediumOctober 19, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2022-3439 Fix available 4.5 MediumOctober 14, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Origin Validation Error in ikus060/rdiffweb CVE-2022-3457 Fix available 3.7 LowOctober 13, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2022-3456 Fix available 5.6 MediumOctober 13, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Open Redirect in ikus060/rdiffweb CVE-2022-3438 Fix available 5.7 MediumOctober 10, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Path Traversal in ikus060/rdiffweb CVE-2022-3389 Fix available 8.2 HighOctober 6, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Weak Password Requirements in ikus060/rdiffweb CVE-2022-3376 Fix available 3.5 LowOctober 6, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2022-3273 Fix available 3.6 LowOctober 6, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more No limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb CVE-2022-3371 Fix available 7.5 HighSeptember 30, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more No limit in length of "Fullname" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb CVE-2022-3364 Fix available 5.3 MediumSeptember 29, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Weak Password Requirements in ikus060/rdiffweb CVE-2022-3326 Fix available 5.4 MediumSeptember 28, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Use of Cache Containing Sensitive Information in ikus060/rdiffweb CVE-2022-3292 Fix available 4.3 MediumSeptember 28, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2022-3298 Fix available 5.3 MediumSeptember 26, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Improper Handling of Length Parameter Inconsistency in ikus060/rdiffweb CVE-2022-3290 Fix available 5.7 MediumSeptember 26, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Improper Handling of Length Parameter Inconsistency in ikus060/rdiffweb CVE-2022-3272 Fix available 5.3 MediumSeptember 26, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb CVE-2022-3295 Fix available 5.3 MediumSeptember 26, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Improper Cleanup on Thrown Exception in ikus060/rdiffweb CVE-2022-3301 Fix available 4.3 MediumSeptember 26, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Session Fixation in ikus060/rdiffweb CVE-2022-3269 Fix available 6.4 MediumSeptember 23, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Cross-Site Request Forgery (CSRF) on user's settings in GitHub repository ikus060/rdiffweb prior to 2.4.6. in ikus060/rdiffweb CVE-2022-3274 Fix available 7.0 HighSeptember 22, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb CVE-2022-3267 Fix available 6.8 MediumSeptember 22, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb CVE-2022-3233 Fix available 4.3 MediumSeptember 21, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb CVE-2022-3250 Fix available 4.9 MediumSeptember 21, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb CVE-2022-3232 Fix available 6.5 MediumSeptember 17, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb CVE-2022-3221 Fix available 8.8 HighSeptember 15, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Weak Password Requirements in ikus060/rdiffweb CVE-2022-3179 Fix available 7.1 HighSeptember 13, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in ikus060/rdiffweb CVE-2022-3174 Fix available 7.5 HighSeptember 13, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Missing Custom Error Page in ikus060/rdiffweb CVE-2022-3175 Fix available 5.3 MediumSeptember 13, 2022
• ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 more Improper Restriction of Rendered UI Layers or Frames in ikus060/rdiffweb CVE-2022-3167 Fix available 10.0 CriticalSeptember 8, 2022