PyPI/rdiffweb CVE-2022-4314: unknown, EPSS 0.85%
Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.
Action: Upgrade rdiffweb to 2.5.2 or later.
pip install rdiffweb==2.5.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.5.2 | - |
Fixed versions
| 2.5.2 |
Sources
- osv: PYSEC-2022-43002
- https://github.com/ikus060/rdiffweb/commit/b2df3679564d0daa2856213bb307d3e34bd89a25
- https://huntr.dev/bounties/b2dc504d-92ae-4221-a096-12ff223d95a8
- https://github.com/advisories/GHSA-g594-55mp-f6q8
CVE-2022-4314 · published · modified · JSON