Medium severity5.3NVD Advisory· Published Sep 21, 2022· Updated Jun 17, 2026
CVE-2022-3250
CVE-2022-3250
Description
Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository ikus060/rdiffweb prior to 2.4.6.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
rdiffwebPyPI | < 2.4.6 | 2.4.6 |
Affected products
3- ikus060/ikus060/rdiffwebv5Range: unspecified
Patches
Vulnerability mechanics
References
5- github.com/ikus060/rdiffweb/commit/ac334dd27ceadac0661b1e2e059a8423433c3feenvdPatchThird Party AdvisoryWEB
- huntr.dev/bounties/39889a3f-8bb7-448a-b0d4-a18c671bbd23nvdExploitPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-m748-hjqg-rpp8ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-3250ghsaADVISORY
- github.com/pypa/advisory-database/tree/main/vulns/rdiffweb/PYSEC-2022-287.yamlghsaWEB
News mentions
0No linked articles in our index yet.