What is GHSA-m8r9-qxx8-mrxp?

GHSA-m8r9-qxx8-mrxp is a security advisory published by GitHub Security Advisories with Critical severity. rdiffweb Improper Access Control vulnerability

Which CVE IDs does GHSA-m8r9-qxx8-mrxp cover?

GHSA-m8r9-qxx8-mrxp covers the following CVE IDs: CVE-2022-4724. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-m8r9-qxx8-mrxp?

GHSA-m8r9-qxx8-mrxp has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-m8r9-qxx8-mrxp?

GHSA-m8r9-qxx8-mrxp affects 1 product, including: pip/rdiffweb:\u003c 2.5.5.

GHSA-m8r9-qxx8-mrxpCriticalCVSS 9.8

rdiffweb Improper Access Control vulnerability

Vendor

GitHub Security Advisories

Published

December 27, 2022

Last Modified

October 25, 2024

🔗 CVE IDs covered (1)

CVE-2022-4724 →

📋 Description

Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.

🎯 Affected products1

pip/rdiffweb:< 2.5.5

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2022-4724
https://github.com/ikus060/rdiffweb/commit/c4a19cf67d575c4886171b8efcbf4675d51f3929
https://huntr.dev/bounties/e6fb1931-8d9c-4895-be4a-59839b4b6445
https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43010.yaml
https://github.com/advisories/GHSA-m8r9-qxx8-mrxp