{"action":"Upgrade rdiffweb to 2.4.5 or later.","affected":[{"fixed":"2.4.5","introduced":"0"}],"component":"rdiffweb","cve_ids":["CVE-2022-3232"],"ecosystem":"PyPI","epss":0.00392,"exploited":false,"fixed_versions":["2.4.5"],"ghsa_id":"GHSA-cw2v-wv4g-w4p6","id":"tcs_01M5KGGZ6S10H0EJW3308RSKYA","modified_at":"2026-06-10T17:02:32.762352393Z","published_at":"2022-09-17T20:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-281","https://huntr.dev/bounties/15c8fd98-7f50-4d46-b013-42710af1f99c","https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71","https://github.com/advisories/GHSA-cw2v-wv4g-w4p6"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-281","url":"https://osv.dev/vulnerability/PYSEC-2022-281"}],"summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.5."}