logo

Database

Improper resource allocation In rdiffweb

Description

Missing rate limit on rdiffweb Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Package
Affected version
Patched versions

Aliases

1. CVE-2022-34562. NVD-2022-34563. OSV-2022-34564. GCVE-2022-3456

References

1. https://github.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c3112. https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-43160.yaml3. https://huntr.dev/bounties/b34412ca-50c5-4615-b7e3-5d07d33acfce

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.