CVE-2022-4724

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Improper Access Control in GitHub repository ikus060/rdiffweb prior to 2.5.5.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-284

Affected software

VendorProductVersions
ikus060ikus060/rdiffweb>= unspecified, < 2.5.5

References

Timeline

Published
Dec 27, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-47259.8A vulnerability was found in AWS SDK 2.59.0. It has been rated as critical. This issue affects the function XpathUtils of the file aws-androCVE-2022-47269.8A vulnerability classified as critical was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an CVE-2022-47276.1A vulnerability, which was classified as problematic, was found in OpenMRS Appointment Scheduling Module up to 1.16.x. This affects the funcCVE-2022-47285.4A vulnerability has been found in Graphite Web and classified as problematic. This vulnerability affects unknown code of the component CookiCVE-2022-47295.4A vulnerability was found in Graphite Web and classified as problematic. This issue affects some unknown processing of the component TemplatCVE-2022-47305.4A vulnerability was found in Graphite Web. It has been classified as problematic. Affected is an unknown function of the component Absolute CVE-2022-47315.4A vulnerability, which was classified as problematic, was found in myapnea up to 29.0.x. Affected is an unknown function of the component TiCVE-2022-473118.8A proprietary protocol for iBoot devices is used for control and keepalive commands. The function compares the username and password; it alsCVE-2022-473177.8Out-of-bounds write vulnerability in V-Server v4.0.12.0 and earlier allows a local attacker to obtain the information and/or execute arbitraCVE-2022-473188.0ruby-git versions prior to v1.13.0 allows a remote authenticated attacker to execute an arbitrary ruby code by having a user to load a reposCVE-2022-47327.2Unrestricted Upload of File with Dangerous Type in GitHub repository microweber/microweber prior to 1.3.2.CVE-2022-473208.1The iBoot device’s basic discovery protocol assists in initial device configuration. The discovery protocol shows basic information about de
CVE-2022-4724: Critical severity, CVSS 9.8 | Vulnix