CVE-2022-4644

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.4.

• CWE-601

• https://github.com/ikus060/rdiffweb/commit/5f861670ef8f38ca8eea52a98672d0e0fabb5368Patch, Third Party Advisory
• https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0Exploit, Patch, Third Party Advisory
• https://github.com/ikus060/rdiffweb/commit/5f861670ef8f38ca8eea52a98672d0e0fabb5368Patch, Third Party Advisory
• https://huntr.dev/bounties/77e5f425-c764-4cb0-936a-7a76bfcf19b0Exploit, Patch, Third Party Advisory

Published

Dec 22, 2022

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-4643A vulnerability was found in docconv up to 1.2.0. It has bee…9.8
• CVE-2022-46430TP-Link TL-WR740N V1 and V2 v3.12.4 and earlier allows authe…4.8
• CVE-2022-46432An exploitable firmware modification vulnerability was disco…7.5
• CVE-2022-46434An issue in the firmware update process of TP-Link TL-WA7510…7.5
• CVE-2022-46435An issue in the firmware update process of TP-Link TL-WR941N…8.8
• CVE-2022-46438A cross-site scripting (XSS) vulnerability in the /admin/art…5.4
• CVE-2022-46440ttftool v0.9.2 was discovered to contain a segmentation viol…5.5
• CVE-2022-46442dedecms <=V5.7.102 is vulnerable to SQL Injection. In sys_ s…9.8
• CVE-2022-46443mesinkasir Bangresto 1.0 is vulnberable to SQL Injection via…8.8
• CVE-2022-46449An issue in MPD (Music Player Daemon) v0.23.10 allows attack…7.5
• CVE-2022-4645LibTIFF 4.4.0 has an out-of-bounds read in tiffcp in tools/t…5.5
• CVE-2022-46456NASM v2.16 was discovered to contain a global buffer overflo…6.1