rdiffweb vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-67796Highrdiffweb: IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other users CVE-2023-5289Highrdiffweb: Rdiffweb Allocation of Resources Without Limits or Throttling vulnerability CVE-2023-4138Mediumrdiffweb: RDiffWeb vulnerable to Allocation of Resources Without Limits or Throttling CVE-2022-4721Mediumrdiffweb: rdiffweb vulnerable to Special Element Injection CVE-2022-4723Highrdiffweb: rdiffweb has no rate limit on resend email feature CVE-2022-4719Mediumrdiffweb: rdiffweb vulnerable to Business Logic Errors CVE-2022-4722Highrdiffweb: rdiffweb vulnerable to Authentication Bypass by Primary Weakness CVE-2022-4724Criticalrdiffweb: rdiffweb Improper Access Control vulnerability CVE-2022-4720Highrdiffweb: rdiffweb vulnerable to Open Redirect CVE-2022-4644Mediumrdiffweb: rdiffweb Open Redirect vulnerability CVE-2022-4646Highrdiffweb: rdiffweb vulnerable to Cross-Site Request Forgery CVE-2022-4314Criticalrdiffweb: Improper Privilege Management in rdiffweb CVE-2022-4018Lowrdiffweb: Rdiffweb vulnerable to Missing Authentication for Critical Function CVE-2022-3362Highrdiffweb: rdiffweb vulnerable to Insufficient Session Expiration CVE-2022-3363Criticalrdiffweb: Rdiffweb subject to Business Logic Errors CVE-2022-3327Criticalrdiffweb: Rdiffweb is missing authentication for critical function CVE-2022-3439Criticalrdiffweb: Missing rate limit on rdiffweb CVE-2022-3457Criticalrdiffweb: Origin Validation Error in rdiffweb CVE-2022-3456Mediumrdiffweb: Missing rate limit on rdiffweb CVE-2022-3438Mediumrdiffweb: rdiffweb vulnerable to Open Redirect CVE-2022-3273Highrdiffweb: rdiffweb does not have a rate limit on incorrect password attempts to prevent brute force attacks CVE-2022-3389Highrdiffweb: rdiffweb Path Traversal vulnerability CVE-2022-3376Mediumrdiffweb: rdiffweb allows a new password to be the same as the previous password CVE-2022-3371Highrdiffweb: rdiffweb's lack of token name length limit can result in DoS or memory corruption CVE-2022-3326Mediumrdiffweb: rdiffweb vulnerable to password complexity bypass leading to weak passwords

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo