CVE-2022-3456

Description

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.5.0.

How to fix CVE-2022-3456

To remediate CVE-2022-3456, upgrade the affected package to a fixed version below.

• PyPI/rdiffweb—upgrade to 2.5.0 or later
• PyPI/rdiffweb—upgrade to b78ec09f4582e363f6f449df6f987127e126c311 or later

Is CVE-2022-3456 being exploited?

Low — EPSS is 0.3%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 2.5.0
• from 0, < b78ec09f4582e363f6f449df6f987127e126c311 | from 0, < 2.5.0

CVSS scores

References (6)

• ADVISORYgithub.com/advisories/GHSA-92gf-p376-6r9r
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2022-3456
• PATCHgithub.com/ikus060/rdiffweb
• WEBgithub.com/ikus060/rdiffweb/commit/b78ec09f4582e363f6f449df6f987127e126c311