PyPI/rdiffweb CVE-2022-3174: unknown, EPSS 0.71%

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.2.

Action: Upgrade rdiffweb to 2.4.2 or later.

pip install rdiffweb==2.4.2

Affected

Fixed versions

Sources

• osv: PYSEC-2022-271
• https://huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce
• https://github.com/ikus060/rdiffweb/commit/f2de2371c5e13ce1c6fd6f9a1ed3e5d46b93cd7e
• https://github.com/advisories/GHSA-mjw4-xvx6-3grg

CVE-2022-3174 · published 2022-09-13T10:15:00Z · modified 2023-11-08T04:09:32.825654Z · JSON