What is GHSA-jw36-mrvg-j5fx?

GHSA-jw36-mrvg-j5fx is a security advisory published by GitHub Security Advisories with Critical severity. Rdiffweb subject to Business Logic Errors

Which CVE IDs does GHSA-jw36-mrvg-j5fx cover?

GHSA-jw36-mrvg-j5fx covers the following CVE IDs: CVE-2022-3363. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-jw36-mrvg-j5fx?

GHSA-jw36-mrvg-j5fx has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-jw36-mrvg-j5fx?

GHSA-jw36-mrvg-j5fx affects 1 product, including: pip/rdiffweb:\u003c 2.5.0a7.

GHSA-jw36-mrvg-j5fxCriticalCVSS 9.8

Rdiffweb subject to Business Logic Errors

Vendor

GitHub Security Advisories

Published

October 27, 2022

Last Modified

October 26, 2024

🔗 CVE IDs covered (1)

CVE-2022-3363 →

📋 Description

Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.

🎯 Affected products1

pip/rdiffweb:< 2.5.0a7

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-3363
https://github.com/ikus060/rdiffweb/commit/c27c46bac656b1da74f28eac1b52dfa5df76e6f2
https://huntr.dev/bounties/b8a40ba6-2452-4abe-a80a-2d065ee8891e
https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-42978.yaml
https://github.com/advisories/GHSA-jw36-mrvg-j5fx