cve.bz

CVE-2022-3292

4.6 mediumEPSS 0.6%

Medium (4.6) in ikus-soft rdiffweb. EPSS 0.6% chance of exploitation in the next 30 days. Fixed in rdiffweb 2.4.8, 2.4.9.

Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8.

Severity

CVSS 3.1

4.6 medium
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.6% chance of exploitation in the next 30 days; higher than 46% of CVEs (scores of 2026-10-31)
CWE
CWE-524
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-7fqm-jm52-f9vcPyPIrdiffweb<2.4.92.4.9
PYSEC-2022-296PyPIrdiffweb<2.4.82.4.8

References

Check your stackJSON