~ / search / GHSA-85fp-523q-5xwc

GHSA-85fp-523q-5xwc

rdiffweb vulnerable to Cross-Site Request Forgery

Source: GitHub Advisory Database (reviewed) High CVE-2022-4646

Packages

EcosystemPackageAffectedFixed in
PyPI rdiffweb < 2.5.4 2.5.4

Details

As written in the advisory (Markdown source, shown as plain text).

rdiffweb prior to version 2.5.4 is vulnerable to Cross-Site Request Forgery (CSRF).

References

External links from the advisory. They lead to third-party sites.