~ / search / GHSA-7q4r-x5qg-mmcp

GHSA-7q4r-x5qg-mmcp

rdiffweb has no rate limit on resend email feature

Source: GitHub Advisory Database (reviewed) High CVE-2022-4723

Packages

EcosystemPackageAffectedFixed in
PyPI rdiffweb < 2.5.5 2.5.5

Details

As written in the advisory (Markdown source, shown as plain text).

rdiffweb prior to 2.5.5 has no rate limit on the "resend email feature" while enable or disable 2FA from `/prefs/mfa` endpoint .

References

External links from the advisory. They lead to third-party sites.