GitHub Advisoryadvisory · PyPI

GHSA-qq29-5vjh-vxwr rdiffweb vulnerable to Improper Cleanup on Thrown Exception

MEDIUM Published 2022-09-27 Modified 2024-10-25 Official page ↗
Aliases
CVE-2022-3301
Ecosystem
PyPI
Packages
rdiffweb
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-460
Reviewed
2022-09-30

Affected packages

• PyPI rdiffweb: < 2.4.8 → fixed in 2.4.8

Description

rdiffweb prior to version 2.4.8 is vulnerable to Improper Cleanup on Thrown Exception. This could allow an attacker to display a message of their choice onto a web page. Version 2.4.8 contains a fix for this issue.

Related

Alias · CVE (1)

  • CVE-2022-3301 Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8. vulnerability

Weakness · CWE (1)

  • CWE-460 Improper Cleanup on Thrown Exception weakness

References