CVE-2022-3232

Advisory

rdiffweb prior to 2.4.5 is vulnerable to Cross-Site Request Forgery (CSRF). An attacker exploiting this vulnerability can use it to delete repositories and users.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://github.com/advisories/GHSA-cw2v-wv4g-w4p6
• https://nvd.nist.gov/vuln/detail/CVE-2022-3232
• https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71
• https://github.com/ikus060/rdiffweb
• https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-281.yaml
• https://huntr.dev/bounties/15c8fd98-7f50-4d46-b013-42710af1f99c
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3232