CVE-2022-3363

Published: Oct 26, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.

Affected (7)

Products: Ikus Soft: Rdiffweb

1 product

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Ikus Soft Rdiffweb	Before 2.5.0
Ikus Soft Rdiffweb	Version 2.5.0 alpha1
Ikus Soft Rdiffweb	Version 2.5.0 alpha2
Ikus Soft Rdiffweb	Version 2.5.0 alpha3
Ikus Soft Rdiffweb	Version 2.5.0 alpha4
Ikus Soft Rdiffweb	Version 2.5.0 alpha5
Ikus Soft Rdiffweb	Version 2.5.0 alpha6

Related CWEs

References (5)

https://github.com/ikus060/rdiffweb/commit/c27c46bac656b1da74f28eac1b52dfa5df76e6f2

Source: security@huntr.dev

PatchThird Party Advisory

https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e

Source: security@huntr.dev

Permissions RequiredThird Party Advisory

https://github.com/ikus060/rdiffweb/commit/c27c46bac656b1da74f28eac1b52dfa5df76e6f2

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party Advisory

https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party Advisory

https://huntr.com/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

Timeline

No history available yet.