← back
CVE-2022-3274

Cross-Site Request Forgery (CSRF) on user's settings in GitHub repository ikus060/rdiffweb prior to 2.4.6. in ikus060/rdiffweb

CVSS 7 HIGHEPSS 0.4%CWE-352
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.
CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H
Affected products
ikus060 · ikus060/rdiffweb

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://github.com/ikus060/rdiffweb/commit/e974df75bdbcff3996ad70bd1b4424ec1485ea3fhttps://huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f