CVE-2022-3389

Path Traversal in GitHub repository ikus060/rdiffweb prior to 2.4.10.

• CWE-22

• https://github.com/ikus060/rdiffweb/commit/323383d1db656f1b1291be529947bd943a6b0e99Patch, Third Party Advisory
• https://huntr.dev/bounties/f7d2a6ab-2faf-4719-bdb6-e4e5d6065752Exploit, Third Party Advisory
• https://github.com/ikus060/rdiffweb/commit/323383d1db656f1b1291be529947bd943a6b0e99Patch, Third Party Advisory
• https://huntr.dev/bounties/f7d2a6ab-2faf-4719-bdb6-e4e5d6065752Exploit, Third Party Advisory

Published

Oct 6, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-33884Parsing a maliciously crafted X_B file can force Autodesk Au…7.5
• CVE-2022-33885A maliciously crafted X_B, CATIA, and PDF file when parsed t…7.8
• CVE-2022-33886A maliciously crafted MODEL and SLDPRT file can be used to w…7.8
• CVE-2022-33887A maliciously crafted PDF file when parsed through Autodesk …7.8
• CVE-2022-33888A malicious crafted Dwg2Spd file when processed through Auto…7.8
• CVE-2022-33889A maliciously crafted GIF or JPEG files when parsed through …7.8
• CVE-2022-33890A maliciously crafted PCT or DWF file when consumed through …7.8
• CVE-2022-33891The Apache Spark UI offers the possibility to enable ACLs vi…8.8
• CVE-2022-33892Path traversal in the Intel(R) Quartus Prime Pro and Standar…7.8
• CVE-2022-33893Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2022-33894Improper input validation in the BIOS firmware for some Inte…7.8
• CVE-2022-33895Rejected reason: This CVE ID has been rejected or withdrawn …