Skip to content
OpenAdvisories
High · 7.5 CVE-2022-3371 EUVD-2022-0247GHSA-3fhq-72hw-jqwvPYSEC-2022-299

No limit in length of "Token name" parameter results in DOS attack /memory corruption in ikus060/rdiffweb prior to 2.5.0a3 in ikus060/rdiffweb

Published Sep 30, 2022 · Updated May 20, 2025 · Assigned by @huntrdev

Vendor: ikus060 Product: ikus060/rdiffweb Package: rdiffweb Ecosystem: PyPI

Description

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3.

Affected products

VendorProductAffectedFixed
ikus060 ikus060/rdiffweb unspecified – < 2.5.0a3 2.5.0a3

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI rdiffweb < 2.5.0a3 2.5.0a3 GHSA-3fhq-72hw-jqwv
PyPI rdiffweb < 2.4.10 2.4.10 PYSEC-2022-299

References