CVE-2022-3274

Cross-Site Request Forgery (CSRF) on user's settings in GitHub repository ikus060/rdiffweb prior to 2.4.6. in ikus060/rdiffweb

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.

Affected

ikus060 · ikus060/rdiffweb

CVSS v4.0 GitHub

7.1 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N

CVSS v3.1 NVD

3.5 LOWCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

CVSS v3.0 HUNTR

7.0 HIGHCVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H

EPSS

0.50% chance of exploitation in the next 30 days, 41st percentile

Published

2022-09-22

Updated

2025-05-22

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/8834c356-4ddb-4be7-898b-d76f480e9c3f

Security advisories

• ikus060/rdiffweb/commit/e974df75bdbcff3996ad70bd1b4424ec1485ea3f
• advisories/GHSA-gmj8-84r4-h46j

References

• CVE Record
• NVD entry