CVE-2022-3274 HIGH

CVE-2022-3274: Cross-Site Request Forgery (CSRF) on user's settings in GitHub repository ikus060/rdiffweb prior to 2.4.6. in ikus060/rdiffweb

Vendor Ikus060
Product ikus060/rdiffweb
Weakness CWE-352 · CSRF
Published September 22, 2022
Last update May 22, 2025
View on NVD All CVEs

CVSS base score

7.0/10
Attack vector Adjacent
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:H

What the vulnerability does

01Description

Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.7.

Key dates

02Disclosure timeline

September 22, 2022 CVE published
May 22, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2022-1607 Cross Site Scripting vulnerability in NE843 Pulsar Plus Controller CVE-2024-0511 Royal Elementor Addons and Templates <= 1.3.87 - Cross-Site Request Forgery via wpr_update_form_action_meta CVE-2025-48265 WordPress Year Make Model Search for WooCommerce plugin <= 1.0.11 - Cross Site Request Forgery (CSRF) to Settings Change vulnerability CVE-2025-53308 WordPress Image Slider With Description plugin <= 9.2 - Cross Site Request Forgery (CSRF) Vulnerability CVE-2025-26570 WordPress Glance That plugin <= 4.9 - CSRF to Stored XSS vulnerability