Executive brief
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.
Affected products
- PyPI rdiffweb
Junglewise Threat Intelligence
CVE-2022-4721: PYSEC-2022-43007 - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5
CVE-2022-4721 · Severity: low · CVSS 3.1 · Published 2022-12-27
Technologies: rdiffweb (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-3048 - IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other users
- PYSEC-2026-1863 - RDiffWeb vulnerable to Allocation of Resources Without Limits or Throttling
- PYSEC-2023-186 - Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4.
- PYSEC-2022-43010 - Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.
- PYSEC-2022-43008 - Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.