Vulnerabilities > CVE-2022-4721 - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) vulnerability in Ikus-Soft Rdiffweb

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

ikus-soft

CWE-75

NVD

Published: 2022-12-27

Updated: 2023-01-05

Summary

Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository ikus060/rdiffweb prior to 2.5.5.

Vulnerable Configurations

Part	Description	Count
Application	Ikus-Soft Ikus Soft Rdiffweb 0.6.4 Ikus Soft Rdiffweb 0.6.5 Ikus Soft Rdiffweb 0.7.0 Ikus Soft Rdiffweb 0.7.1 Ikus Soft Rdiffweb 0.7.2 Ikus Soft Rdiffweb 0.8.1 Ikus Soft Rdiffweb 0.8.2 Ikus Soft Rdiffweb 0.8.3 Ikus Soft Rdiffweb 0.9.1 Ikus Soft Rdiffweb 0.9.2 Ikus Soft Rdiffweb 0.9.3 Ikus Soft Rdiffweb 0.9.4 Ikus Soft Rdiffweb 0.9.5 Ikus Soft Rdiffweb 0.10.0 Ikus Soft Rdiffweb 0.10.2 Ikus Soft Rdiffweb 0.10.4 Ikus Soft Rdiffweb 0.10.5 Ikus Soft Rdiffweb 0.10.6 Ikus Soft Rdiffweb 0.10.7 Ikus Soft Rdiffweb 0.10.8 Ikus Soft Rdiffweb 0.10.9 Ikus Soft Rdiffweb 1.0.0 Ikus Soft Rdiffweb 1.0.1 Ikus Soft Rdiffweb 1.0.2 Ikus Soft Rdiffweb 1.0.3 Ikus Soft Rdiffweb 1.1.0 Ikus Soft Rdiffweb 1.2.0 Ikus Soft Rdiffweb 1.2.1 Ikus Soft Rdiffweb 1.2.2 Ikus Soft Rdiffweb 1.3.0 Ikus Soft Rdiffweb 1.3.1 Ikus Soft Rdiffweb 1.3.2 Ikus Soft Rdiffweb 1.4.0 Ikus Soft Rdiffweb 1.4.1 Ikus Soft Rdiffweb 1.5.0 Ikus Soft Rdiffweb 1.5.1 Ikus Soft Rdiffweb 1.6.0 Ikus Soft Rdiffweb 2.0.0 Ikus Soft Rdiffweb 2.0.1 Ikus Soft Rdiffweb 2.0.2 Ikus Soft Rdiffweb 2.0.3 Ikus Soft Rdiffweb 2.1.0 Ikus Soft Rdiffweb 2.2.0 Ikus Soft Rdiffweb 2.2.1 Ikus Soft Rdiffweb 2.3.0 Ikus Soft Rdiffweb 2.3.1 Ikus Soft Rdiffweb 2.3.2 Ikus Soft Rdiffweb 2.3.3 Ikus Soft Rdiffweb 2.3.4 Ikus Soft Rdiffweb 2.3.5 Ikus Soft Rdiffweb 2.3.6 Ikus Soft Rdiffweb 2.3.7 Ikus Soft Rdiffweb 2.3.8 Ikus Soft Rdiffweb 2.3.9 Ikus Soft Rdiffweb 2.4.0 Ikus Soft Rdiffweb 2.4.1 Ikus Soft Rdiffweb 2.4.2 Ikus Soft Rdiffweb 2.4.3 Ikus Soft Rdiffweb 2.4.4 Ikus Soft Rdiffweb 2.4.5 Ikus Soft Rdiffweb 2.4.6 Ikus Soft Rdiffweb 2.4.7 Ikus Soft Rdiffweb 2.4.8 Ikus Soft Rdiffweb 2.4.9 Ikus Soft Rdiffweb 2.4.10 Ikus Soft Rdiffweb 2.5.0 Ikus Soft Rdiffweb 2.5.1 Ikus Soft Rdiffweb 2.5.2 Ikus Soft Rdiffweb 2.5.3 Ikus Soft Rdiffweb 2.5.4	116

Common Weakness Enumeration (CWE)

CWE-75 - Failure to Sanitize Special Elements into a Different Plane (Special Element Injection)

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References