Lucene search
Veracode Vulnerability DatabaseVERACODE:37244HistorySep 23, 2022 - 4:56 a.m.
Cross-Site Request Forgery (CSRF)
2022-09-2304:56:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
14
rdiffweb
vulnerability
pref_notification.py
csrf
email
attack
EPSS
0.001
Percentile
21.4%
rdiffweb is vulnerable to cross-site request forgery. The vulnerability exists because the render_prefs_panel function in pref_notification.py does not properly handle the password_form and profile_form attributes, allowing an attacker to change the email ID of the user by redirecting to the malicious urls.
Related
cve
cve
CVE-2022-3274
2022-09-22 19:15:09
huntr
huntr
CSRF to change the email id
2022-09-21 13:58:20
cvelist
cvelist
prion
prion
Cross site request forgery (csrf)
2022-09-22 19:15:00
github
github
osv
osv
CVE-2022-3274
2022-09-22 19:15:09
PYSEC-2022-289
2022-09-22 19:15:00
nvd
nvd
CVE-2022-3274
2022-09-22 19:15:09
kaspersky
kaspersky
KLA20110 Multiple vulnerabilities in Wireshark
2022-10-26 00:00:00
nessus
nessus
Wireshark 3.6.x < 3.6.9 Multiple Vulnerabilities (macOS)
2022-10-27 00:00:00
Wireshark 3.6.x < 3.6.9 Multiple Vulnerabilities
2022-10-27 00:00:00