{"id":"CVE-2022-3327","published":"2022-10-19T00:00:00Z","modified":"2025-05-09T14:18:42Z","title":"Missing Authentication for Critical Function in ikus060/rdiffweb","vendor":"ikus060","product":"ikus060/rdiffweb","tier":"tail","description":{"text":"Missing Authentication for Critical Function in GitHub repository ikus060/rdiffweb prior to 2.5.0a6.","provenance":"source","from":"CVE.org"},"cvss":{"score":4.5,"severity":"MEDIUM","version":"3.0","vector":"CVSS:3.0/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.01004,"percentile":0.62977,"provenance":"source"},"cwes":[{"id":"CWE-306","name":"Missing Authentication for Critical Functionality"}],"references":[{"url":"https://huntr.dev/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1","tags":[]},{"url":"https://github.com/ikus060/rdiffweb/commit/f2a32f2a9f3fb8be1a9432ac3d81d3aacdb13095","tags":[]},{"url":"https://huntr.com/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1","tags":["exploit"]}],"priority":{"score":20.7,"factors":[{"name":"EPSS percentile","points":12.6},{"name":"Public exploit code","points":5.0},{"name":"CVSS severity","points":3.15}]},"vendorSlug":"ikus060","affectedVersions":[{"vendor":"ikus060","product":"ikus060/rdiffweb","versions":[">= unspecified, < 2.5.0a6"]}],"affected":[{"ecosystem":"PyPI","package":"rdiffweb","vulnerableRanges":["<2.5.0","<2.4.10"],"patched":["2.5.0","2.4.10"],"from":["GHSA-99j5-fvg3-54pm","PYSEC-2022-42977"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-0249","exploited":false,"provenance":"source"},"exploitRefs":["https://huntr.com/bounties/02207c8f-2b15-4a31-a86a-74fd2fca0ed1"]}