CVE-2022-3301

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-3301
Improper Cleanup on Thrown Exception in GitHub repository ikus060/rdiffweb prior to 2.4.8.

2.4 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e Patch Third Party Advisory
https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a Exploit Patch Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:ikus-soft:rdiffweb:*:*:*:*:*:*:*:*
History

28 Sep 2022, 18:07

Type Values Removed Values Added
First Time Ikus-soft
Ikus-soft rdiffweb
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 2.4
CPE cpe:2.3:a:ikus-soft:rdiffweb:*:*:*:*:*:*:*:*
References (CONFIRM) https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a - (CONFIRM) https://huntr.dev/bounties/d3bf1e5d-055a-44b8-8d60-54ab966ed63a - Exploit, Patch, Third Party Advisory
References (MISC) https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e - (MISC) https://github.com/ikus060/rdiffweb/commit/5ac38b2a75becbab9f948bd5e37ecbcd9f0b362e - Patch, Third Party Advisory

26 Sep 2022, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2022-09-26 11:15

Updated : 2023-12-10 14:35

NVD link : CVE-2022-3301

Mitre link : CVE-2022-3301

CVE.ORG link : CVE-2022-3301

JSON object : View

Products Affected

ikus-soft

  • rdiffweb
CWE
CWE-460

Improper Cleanup on Thrown Exception