CVE-2022-3267
2 advisories.
PyPI/rdiffweb CVE-2022-3267: medium 4.3, EPSS 0.39%
rdiffweb Cross-Site Request Forgery vulnerability
Action: Upgrade rdiffweb to 2.4.6 or later.
pip install rdiffweb==2.4.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.6 | - |
Fixed versions
| 2.4.6 |
Sources
- osv: GHSA-74j6-3hh4-w3f5
- https://nvd.nist.gov/vuln/detail/CVE-2022-3267
- https://github.com/ikus060/rdiffweb/commit/20fc0d304412cc569b21f31e52cb8b94094d6314
- https://github.com/ikus060/rdiffweb
- https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-284.yaml
- https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2
CVE-2022-3267 · published · modified · JSON
PyPI/rdiffweb CVE-2022-3267: unknown, EPSS 0.39%
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.
Action: Upgrade rdiffweb to 2.4.6 or later.
pip install rdiffweb==2.4.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.4.6 | - |
Fixed versions
| 2.4.6 |
Sources
- osv: PYSEC-2022-284
- https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2
- https://github.com/ikus060/rdiffweb/commit/20fc0d304412cc569b21f31e52cb8b94094d6314
- https://github.com/advisories/GHSA-74j6-3hh4-w3f5
CVE-2022-3267 · published · modified · JSON