What is GHSA-cw2v-wv4g-w4p6?

GHSA-cw2v-wv4g-w4p6 is a security advisory published by GitHub Security Advisories with Medium severity. rdiffweb CSRF vulnerability in admin area can lead to deletion of repositories and users

Which CVE IDs does GHSA-cw2v-wv4g-w4p6 cover?

GHSA-cw2v-wv4g-w4p6 covers the following CVE IDs: CVE-2022-3232. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-cw2v-wv4g-w4p6?

GHSA-cw2v-wv4g-w4p6 has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-cw2v-wv4g-w4p6?

GHSA-cw2v-wv4g-w4p6 affects 1 product, including: pip/rdiffweb:\u003c 2.4.5.

GHSA-cw2v-wv4g-w4p6MediumCVSS 4.3

rdiffweb CSRF vulnerability in admin area can lead to deletion of repositories and users

Vendor

GitHub Security Advisories

Published

September 18, 2022

Last Modified

October 25, 2024

🔗 CVE IDs covered (1)

CVE-2022-3232 →

📋 Description

rdiffweb prior to 2.4.5 is vulnerable to Cross-Site Request Forgery (CSRF). An attacker exploiting this vulnerability can use it to delete repositories and users.

🎯 Affected products1

pip/rdiffweb:< 2.4.5

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-3232
https://github.com/ikus060/rdiffweb/commit/422791ea45713aaaa865bdca74addb9fffd93a71
https://huntr.dev/bounties/15c8fd98-7f50-4d46-b013-42710af1f99c
https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-281.yaml
https://github.com/advisories/GHSA-cw2v-wv4g-w4p6