~ / search / GHSA-ch4c-278q-5654

GHSA-ch4c-278q-5654

rdiffweb Missing Custom Error Page

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-3175

Packages

EcosystemPackageAffectedFixed in
PyPI rdiffweb >= 2.4.1, < 2.4.2 2.4.2

Details

As written in the advisory (Markdown source, shown as plain text).

rdiffweb version 2.4.1 is set to a default and leaks error information. Version 2.4.2 fixes this issue.

References

External links from the advisory. They lead to third-party sites.