CVE-2022-4722 — Authentication Bypass by Primary Weakness in ikus060/rdiffweb

2026-10-06T15:37:53.933907+00:00

Affected: ikus060/rdiffweb

Authentication Bypass by Primary Weakness in GitHub repository ikus060/rdiffweb prior to 2.5.5.

GHSA-wf33-6x33-wcf9 — rdiffweb vulnerable to Authentication Bypass by Primary Weakness

2026-10-06T15:37:53.933959+00:00

Affected: PyPI: rdiffweb

In rdiffweb prior to 2.5.5, the username field is not unique to users. This allows exploitation of primary key logic by creating the same name with different combinations & may allow unauthorized access.

Most recent entries from all

CVE-2022-4722 — Authentication Bypass by Primary Weakness in ikus060/rdiffweb

GHSA-wf33-6x33-wcf9 — rdiffweb vulnerable to Authentication Bypass by Primary Weakness