ikus060/rdiffweb · Security
Missing rate limit on rdiffweb
- GHSA ID
- GHSA-92gf-p376-6r9r
- CVE ID
- CVE-2022-3456
- Severity
- medium
- Published
- Updated
Description
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
CWEs
- CWE-770 · Allocation of Resources Without Limits or Throttling
References
- https://nvd.nist.gov/vuln/detail/CVE-2022-3456 ↗
- https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311 ↗
- https://huntr.dev/bounties/b34412ca-50c5-4615-b7e3-5d07d33acfce ↗
- https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43160.yaml ↗
- https://github.com/advisories/GHSA-92gf-p376-6r9r ↗