PyPI/rdiffweb CVE-2022-3221: unknown, EPSS 0.76%

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3.

Action: Upgrade rdiffweb to 2.4.3 or later.

pip install rdiffweb==2.4.3

Affected

Fixed versions

Sources

• osv: PYSEC-2022-278
• https://huntr.dev/bounties/1fa1aac9-b16a-4a70-a7da-960b3908ae1d
• https://github.com/ikus060/rdiffweb/commit/9125f5a2d918fed0f3fc1c86fa94cd1779ed9f73
• https://github.com/advisories/GHSA-vq4h-xrwc-m639

CVE-2022-3221 · published 2022-09-15T09:15:00Z · modified 2023-11-08T04:09:35.265975Z · JSON