ikus060/rdiffweb prior to 2.5.0a5 did not enforce origin validation in web traffic. Users are advised to upgrade to version 2.5.0a5.
{ "nvd_published_at": "2022-10-13T20:15:00Z", "cwe_ids": [ "CWE-346" ], "severity": "CRITICAL", "github_reviewed": true, "github_reviewed_at": "2022-10-14T16:10:12Z" }