~ / search / GHSA-9vxf-mcm6-5m42

GHSA-9vxf-mcm6-5m42

rdiffweb CSRF could lead to disabling notifications in user profile

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-3233

Packages

EcosystemPackageAffectedFixed in
PyPI rdiffweb < 2.4.6 2.4.6

Details

As written in the advisory (Markdown source, shown as plain text).

rdiffweb prior to 2.4.6 is vulnerable to Cross-Site Request Forgery (CSRF), which could lead to disabling notifications in a user's profile.

References

External links from the advisory. They lead to third-party sites.