CVE-2022-3298

Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.

Affected

ikus060 · ikus060/rdiffweb

CVSS v3.1 NVD

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v3.0 HUNTR

5.3 MEDIUMCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

EPSS

1.16% chance of exploitation in the next 30 days, 67th percentile

Published

2022-09-26

Updated

2025-05-21

Proof-of-concept exploits (1)

• https://huntr.dev/bounties/f9fedf94-41c9-49c4-8552-e407123a44e7

Security advisories

• ikus060/rdiffweb/commit/626cca1b75b6c587afd4241a9692e8929b1921a5
• advisories/GHSA-xhw9-4wqq-x67v

References

• CVE Record
• NVD entry