PatchFirst · Свежие уязвимости
За последние 30 дней в rdiffweb опубликовано уязвимостей: 0; в каталоге KEV: 0.
Уязвимостей: 43
IKUS Rdiffweb before 2.10.5 has an improper authorization flaw that allows an attacker with any valid or stolen access token to act as other users. The API does not enforce binding between the authenticated subject and the targeted user/tenant, so crafted requests can read or modify other users data and, in some cases, perform privileged actions. This issue may enable cross-tenant access. Fixed in version 2.10.6.
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0.
Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.5.4.
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.
Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2.
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0.
Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.0a7.
Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
Origin Validation Error in GitHub repository ikus060/rdiffweb prior to 2.5.0a5.
Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.
Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.
Сопоставьте установленный стек и версии со свежими базами уязвимостей.