How many CVEs have patched __init__?

12 published CVEs changed __init__ in ikus060/rdiffweb, in 12 distinct patches totalling 154 changed lines, between 2022 and 2022.

What is the latest CVE that changed __init__?

CVE-2022-4314 (Improper Privilege Management in rdiffweb), published 2022-12-06, changed lines 848 to 857 of rdiffweb/core/librdiff.py.

How does __init__ compare to the rest of ikus060/rdiffweb?

ikus060/rdiffweb has 40 CVEs with a located fix in total; 12 of them changed __init__.

What do the line numbers refer to?

Line numbers are in the fixed version of the file, as the upstream patch left it. A CVE whose fix was backported to several branches is listed once, with the lines from the upstream commit.

__init__ in ikus060/rdiffweb: Patched by 12 CVEs

Improper Privilege Management in rdiffweb

CVE-2022-4314 · rdiffweb/core/librdiff.py · lines 848–857 · +9 −14

Critical · CVSS 9.3

EPSS 0.9%2022-12-06

Rdiffweb vulnerable to Missing Authentication for Critical Function

CVE-2022-4018 · rdiffweb/rdw_app.py · lines 208–211 · +3 −2

Low · CVSS 2.1

EPSS 0.9%2022-11-16

rdiffweb vulnerable to Insufficient Session Expiration

CVE-2022-3362 · rdiffweb/rdw_app.py · lines 235–236 · +2 −1

High · CVSS 8.9

EPSS 0.9%2022-11-14

Rdiffweb is missing authentication for critical function

CVE-2022-3327 · rdiffweb/rdw_app.py · lines 208–211 · +3 −2

Critical · CVSS 9.3

EPSS 0.8%2022-10-19

Missing rate limit on rdiffweb

CVE-2022-3439 · rdiffweb/rdw_app.py · lines 212–213 · +2 −2

Critical · CVSS 9.8

EPSS 0.8%2022-10-14

Missing rate limit on rdiffweb

CVE-2022-3456 · rdiffweb/rdw_app.py · lines 212–213 · +2 −2

Critical · CVSS 9.8

EPSS 0.4%2022-10-13

rdiffweb vulnerable to Open Redirect

CVE-2022-3438 · rdiffweb/controller/page_admin_users.py · line 147 · +0 −11

Medium · CVSS 6.1

EPSS 0.7%2022-10-10

Path Traversal in ikus060/rdiffweb

CVE-2022-3389 · rdiffweb/rdw_app.py · lines 100–215 · +4 −4 in 2 hunks

High · CVSS 8.7

EPSS 1.4%2022-10-06

rdiffweb CSRF vulnerability in admin area can lead to deletion of repositories and users

CVE-2022-3232 · rdiffweb/controller/page_admin.py · lines 193–199 · +7 −9

Medium · CVSS 5.3

EPSS 0.4%2022-09-17

rdiffweb CSRF vulnerability in admin area can lead to deletion of repositories and users

CVE-2022-3232 · rdiffweb/controller/pref_general.py · lines 57–63 · +7 −9

Medium · CVSS 5.3

EPSS 0.4%2022-09-17

rdiffweb contains Weak Password Requirements

CVE-2022-3179 · rdiffweb/controller/page_admin.py · lines 193–206 · +14 −0

High · CVSS 8.7

EPSS 1.0%2022-09-13

rdiffweb contains Weak Password Requirements

CVE-2022-3179 · rdiffweb/controller/pref_general.py · lines 57–70 · +14 −0

High · CVSS 8.7

EPSS 1.0%2022-09-13

rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

CVE-2022-3174 · rdiffweb/rdw_app.py · line 174 · +0 −1

High · CVSS 7.1

EPSS 0.7%2022-09-13

rdiffweb vulnerable to Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

CVE-2022-3174 · rdiffweb/tools/secure_headers.py · line 50 · +1 −1

High · CVSS 7.1

EPSS 0.7%2022-09-13

rdiffweb Missing Custom Error Page

CVE-2022-3175 · rdiffweb/controller/page_admin.py · lines 193–206 · +14 −0

Medium · CVSS 5.3

EPSS 0.9%2022-09-13

rdiffweb Missing Custom Error Page

CVE-2022-3175 · rdiffweb/controller/pref_general.py · lines 57–70 · +14 −0

Medium · CVSS 5.3

EPSS 0.9%2022-09-13

init

Overview

CVEs that patched it

Other functions in these files

Other hotspots in the repository

Frequently asked questions

References

Track ikus060/rdiffweb CVEs