CVE-2022-4720

Open Redirect in GitHub repository ikus060/rdiffweb prior to 2.5.5.

• CWE-601
• CWE-601

• https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078dPatch, Third Party Advisory
• https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70Exploit, Patch, Third Party Advisory
• https://github.com/ikus060/rdiffweb/commit/6afaae56a29536f0118b3380d296c416aa6d078dPatch, Third Party Advisory
• https://huntr.dev/bounties/339687af-6e25-4ad8-823d-c097f607ea70Exploit, Patch, Third Party Advisory

Published

Dec 27, 2022

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-47191Generex UPS CS141 below 2.06 version, could allow a remote a…8.8
• CVE-2022-47192Generex UPS CS141 below 2.06 version, could allow a remote a…8.8
• CVE-2022-47194An insecure default vulnerability exists in the Post Creatio…5.4
• CVE-2022-47195An insecure default vulnerability exists in the Post Creatio…5.4
• CVE-2022-47196An insecure default vulnerability exists in the Post Creatio…5.4
• CVE-2022-47197An insecure default vulnerability exists in the Post Creatio…5.4
• CVE-2022-47208The “puhttpsniff” service, which runs by default, is suscept…8.8
• CVE-2022-47209A support user exists on the device and appears to be a back…8.8
• CVE-2022-4721Failure to Sanitize Special Elements into a Different Plane …5.4
• CVE-2022-47210The default console presented to users over telnet (when ena…7.8
• CVE-2022-47211Microsoft Office Graphics Remote Code Execution Vulnerabilit…7.8
• CVE-2022-47212Microsoft Office Graphics Remote Code Execution Vulnerabilit…7.8