PyPI/rdiffweb CVE-2022-3362: critical 9.8, EPSS 0.96%

rdiffweb vulnerable to Insufficient Session Expiration

Action: Upgrade rdiffweb to 2.5.0 or later.

pip install rdiffweb==2.5.0

Affected

Fixed versions

Sources

• osv: GHSA-94qm-99qc-qwqj
• https://nvd.nist.gov/vuln/detail/CVE-2022-3362
• https://github.com/ikus060/rdiffweb/commit/6efb995bc32c8a8e9ad755eb813dec991dffb2b8
• https://github.com/ikus060/rdiffweb
• https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43000.yaml
• https://huntr.dev/bounties/ca428c31-858d-47fa-adc9-2a59f8e8b2b1

CVE-2022-3362 · published 2022-11-15T12:00:17Z · modified 2024-10-26T19:05:57.330514Z · JSON