{"action":"Upgrade rdiffweb to 2.4.5 or later.","affected":[{"fixed":"2.4.5","introduced":"0"}],"component":"rdiffweb","cve_ids":["CVE-2022-3232"],"ecosystem":"PyPI","epss":0.00395,"exploited":false,"fixed_versions":["2.4.5"],"ghsa_id":"GHSA-cw2v-wv4g-w4p6","id":"tcs_01M5KFDVW56NVTDZK4YKA3FKSF","modified_at":"2024-10-25T21:44:02.846393Z","published_at":"2022-09-18T00:00:30Z","references":["https://osv.dev/vulnerability/GHSA-cw2v-wv4g-w4p6","https://nvd.nist.gov/vuln/detail/CVE-2022-3232","https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71","https://github.com/ikus060/rdiffweb","https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-281.yaml","https://huntr.dev/bounties/15c8fd98-7f50-4d46-b013-42710af1f99c"],"severity":{"label":"medium","score":4.3},"sources":[{"source":"osv","source_id":"GHSA-cw2v-wv4g-w4p6","url":"https://osv.dev/vulnerability/GHSA-cw2v-wv4g-w4p6"}],"summary":"rdiffweb CSRF vulnerability in admin area can lead to deletion of repositories and users"}