~ / search / GHSA-7wr6-fj4x-893v

GHSA-7wr6-fj4x-893v

rdiffweb allows a new password to be the same as the previous password

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-3376

Packages

EcosystemPackageAffectedFixed in
PyPI rdiffweb < 2.5.0 2.5.0

Details

As written in the advisory (Markdown source, shown as plain text).

rdiffweb prior to 2.5.0a4 allows users to set their new password to be the same as the old password during a password reset. Version 2.5.0a4 enforces a password policy in which a new password cannot be the same as the old one.

References

External links from the advisory. They lead to third-party sites.