What’s Vulnerable › Vulnerabilities

CVE-2022-4018: Missing Authentication for Critical Function in ikus060/rdiffweb

• Severity: medium (CVSS 4.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-11-16 · updated 2026-06-17
• Weakness: CWE-306

Description

Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.

Affected products

• ikus060/rdiffweb: through 2.4.10; 2.5.0-alpha1, 2.5.0-alpha2, 2.5.0-alpha3, 2.5.0-alpha4, 2.5.0-alpha5

References

• https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095
• https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5
• https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095
• https://huntr.dev/bounties/5340c2f6-0252-40f6-8929-cca5d64958a5

Get alerted when CVE-2022-4018 or the next vulnerability affects your stack