{"action":"Upgrade rdiffweb to 2.4.2 or later.","affected":[{"fixed":"2.4.2","introduced":"2.4.1"}],"component":"rdiffweb","cve_ids":["CVE-2022-3174"],"ecosystem":"PyPI","epss":0.00706,"exploited":false,"fixed_versions":["2.4.2"],"ghsa_id":"GHSA-mjw4-xvx6-3grg","id":"tcs_01M5KFR9VM172BH4A0477D5EYX","modified_at":"2024-10-25T21:32:37Z","published_at":"2022-09-14T00:00:51Z","references":["https://osv.dev/vulnerability/GHSA-mjw4-xvx6-3grg","https://nvd.nist.gov/vuln/detail/CVE-2022-3174","https://github.com/ikus060/rdiffweb/commit/f2de2371c5e13ce1c6fd6f9a1ed3e5d46b93cd7e","https://github.com/advisories/GHSA-mjw4-xvx6-3grg","https://github.com/ikus060/rdiffweb","https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-271.yaml","https://huntr.dev/bounties/d8a32bd6-c76d-4140-a5ca-ef368a3058ce"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-mjw4-xvx6-3grg","url":"https://osv.dev/vulnerability/GHSA-mjw4-xvx6-3grg"}],"summary":"rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute"}