CVE-2022-3292

Medium

Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8.

@huntrdev·CWE-524·Published 2022-09-28

CVSS

4.6

EPSS

0.00

KEV

Exploits

cve.orgen

99 chars

Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8.

NVDen

99 chars

Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8.

OSV.deven

99 chars

Use of Cache Containing Sensitive Information in GitHub repository ikus060/rdiffweb prior to 2.4.8.

GHSAen

261 chars

rdiffweb prior to version 2.4.9 is vulnerable to Use of Cache Containing Sensitive Information. Due to improper cache control, an attacker can view sensitive information even if they are not logged into an account. Version 2.4.9 contains a patch for this issue.

NVDes

130 chars

Un Uso de la caché que Contiene Información Confidencial en el repositorio de GitHub ikus060/rdiffweb versiones anteriores a 2.4.8

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.0	Primary	cve.org	4.3	—	—	CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
3.0	Primary	cve.org	4.3	—	—	CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N