CVE-2022-4646

Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb

CVSS 5.3 MEDIUMEPSS 0.3%CWE-352

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Affected products

ikus060 · ikus060/rdiffweb

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/ikus060/rdiffweb/commit/e6f0d8002129be90fe82fa3e3ea0a6942caba398 https://huntr.dev/bounties/17bc1b0f-1f5c-432f-88e4-c9866ccf6e10