{"id":"CVE-2022-3233","aliases":["GHSA-9vxf-mcm6-5m42","PYSEC-2022-285"],"url":"https://o3.security/vulnerability/CVE-2022-3233","summary":"Cross-Site Request Forgery (CSRF) in ikus060/rdiffweb","details":"Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.","published":"2022-09-21T19:40:08Z","modified":"2026-09-19T03:45:50.850860252Z","cvss":{"score":4.3,"severity":"MEDIUM","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":1,"affectedPackages":[{"ecosystem":"PyPI","name":"rdiffweb","fixedVersion":"2.4.6"}],"fix":{"url":"https://github.com/ikus060/rdiffweb/commit/18a5aabd48fa6d2d2771a25f95610c28a1a097ca","label":"ikus060/rdiffweb@18a5aab"},"references":[{"type":"WEB","url":"https://huntr.dev/bounties/5ec206e0-eca0-4957-9af4-fdd9185d1db3"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/3xxx/CVE-2022-3233.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3233"},{"type":"FIX","url":"https://github.com/ikus060/rdiffweb/commit/18a5aabd48fa6d2d2771a25f95610c28a1a097ca"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-09-19T03:45:50.850860252Z"}}