{"action":"Upgrade rdiffweb to 2.5.0a6 or later.","affected":[{"fixed":"2.5.0a6","introduced":"0"}],"component":"rdiffweb","cve_ids":["CVE-2022-4018"],"ecosystem":"PyPI","epss":0.00881,"exploited":false,"fixed_versions":["2.5.0a6"],"ghsa_id":"GHSA-4wph-9vrm-6v3w","id":"tcs_01M5KEZBTE4DDNMXDARXDRT5CJ","modified_at":"2024-10-26T19:05:51.631359Z","published_at":"2022-11-16T19:00:32Z","references":["https://osv.dev/vulnerability/GHSA-4wph-9vrm-6v3w","https://nvd.nist.gov/vuln/detail/CVE-2022-4018","https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095","https://github.com/ikus060/rdiffweb","https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43001.yaml","https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-4wph-9vrm-6v3w","url":"https://osv.dev/vulnerability/GHSA-4wph-9vrm-6v3w"}],"summary":"Rdiffweb vulnerable to Missing Authentication for Critical Function"}