{"action":"Upgrade rdiffweb to 2.4.6 or later.","affected":[{"fixed":"2.4.6","introduced":"0"}],"component":"rdiffweb","cve_ids":["CVE-2022-3267"],"ecosystem":"PyPI","epss":0.00391,"exploited":false,"fixed_versions":["2.4.6"],"ghsa_id":"GHSA-74j6-3hh4-w3f5","id":"tcs_01M5KGGZP5NGME8SKR0RN9GWY1","modified_at":"2026-06-10T17:02:33.072337787Z","published_at":"2022-09-22T10:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-284","https://huntr.dev/bounties/7b6ec9f4-4fe9-4716-8dba-3491ffa3f6f2","https://github.com/ikus060/rdiffweb/commit/20fc0d304412cc569b21f31e52cb8b94094d6314","https://github.com/advisories/GHSA-74j6-3hh4-w3f5"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-284","url":"https://osv.dev/vulnerability/PYSEC-2022-284"}],"summary":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6."}