CVE-2022-3295 - Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

HIGH

Allocation of Resources Without Limits or Throttling in ikus060/rdiffweb

Published Sep 26, 2022

8.7

HIGH

CVSS 4.0

EPSS 1.14%

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.4.8.

Vendor Ikus060 Product Ikus060/rdiffweb Default
unknown
Affected
- ≥ unspecified, < 2.4.8

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Ikus060	Ikus060/rdiffweb	unknown	Affected ≥ unspecified, < 2.4.8

No remediation recorded yet.

Weaknesses (1)

CWE-770

Allocation of Resources Without Limits

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-0241		Advisory
https://github.com/advisories/GHSA-hrj7-f62f-j7x7		Advisory
https://github.com/ikus060/rdiffweb/commit/667657c6fe2b336c90be37f37fb92f65df4feee3		x_refsource_MISCPatchThird Party Advisory
https://github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-293.yaml
https://huntr.dev/bounties/202dd03a-3d97-4c64-bc73-1a0f36614233		x_refsource_CONFIRMExploitPatchThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-3295