Rdiffweb CVE-2022-3389

HIGH

Path Traversal (CWE-22)

2022-10-06 security@huntr.dev

Path Traversal Rdiffweb

7.5

CVSS 3.1 · NVD

Share

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

Lifecycle Timeline

1

CVE Published

Oct 06, 2022 - 18:16 nvd

HIGH 7.5

DescriptionNVD

Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10.

AnalysisAI

Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Technical ContextAI

This vulnerability is classified as Path Traversal (CWE-22), which allows attackers to access files and directories outside the intended path. Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10. Affected products include: Ikus-Soft Rdiffweb. Version information: prior to 2.4.10..

RemediationAI

A vendor patch is available. Apply the latest security update as soon as possible. Validate and canonicalize file paths. Use chroot or sandboxing. Reject input containing path separators or '../' sequences.

More in Rdiffweb

View all

CVE-2022-4724 CRITICAL Act Now POC

Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5. Rated critical severity (CVSS 9.8), this v

CVE-2022-4719 CRITICAL Act Now POC

Business Logic Errors in GitHub repository ikus060/rdiffweb prior to 2.5.5. Rated critical severity (CVSS 9.8), this vul

CVE-2022-4314 CRITICAL Act Now POC

Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2. Rated critical severity (CVSS 9.8),

CVE-2022-3362 CRITICAL Act Now POC

Insufficient Session Expiration in GitHub repository ikus060/rdiffweb prior to 2.5.0. Rated critical severity (CVSS 9.8)

CVE-2022-3273 CRITICAL Act Now POC

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a4. Rated criti

CVE-2022-3269 CRITICAL Act Now POC

Session Fixation in GitHub repository ikus060/rdiffweb prior to 2.4.7. Rated critical severity (CVSS 9.8), this vulnerab

CVE-2023-5289 HIGH This Week POC

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4. Rated high se

CVE-2022-3221 HIGH This Week POC

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.3. Rated high severity (CVSS 8.8),

CVE-2022-3179 HIGH This Week POC

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.4.2. Rated high severity (CVSS 8.8), this vu

CVE-2022-3167 HIGH This Week POC

Improper Restriction of Rendered UI Layers or Frames in GitHub repository ikus060/rdiffweb prior to 2.4.1. Rated high se

CVE-2022-3371 HIGH This Week POC

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3. Rated high

CVE-2022-3364 HIGH This Week POC

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0a3. Rated high

Same weakness CWE-22 – Path Traversal

View all

CVE-2019-3396 CRITICAL POC

CVE-2019-19781 CRITICAL POC

CVE-2020-5902 CRITICAL POC

CVE-2021-40444 HIGH POC

CVE-2021-27065 HIGH POC

CVE-2019-11510 CRITICAL POC

CVE-2018-13379 CRITICAL POC

CVE-2015-0016 HIGH POC

Same technique Path Traversal

View all

CVE-2025-64446 CRITICAL POC

CVE-2015-0016 HIGH POC

CVE-2016-0752 HIGH POC

CVE-2024-13159 CRITICAL POC

CVE-2024-13160 CRITICAL POC

CVE-2024-13161 CRITICAL POC

CVE-2014-0780 CRITICAL POC

CVE-2024-48248 HIGH POC

Share

CVE-2022-3389 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy