CVE-2022-3290

rdiffweb prior to 2.4.8 is vulnerable to a potential Dos attack via an unlimited length "username" field. This can result in excess memory consumption, or memory corruption, leading to a Denial of Service (DoS). This issue is patched in version 2.4.8. There are no known workarounds.

Un Manejo Inapropiado de la Inconsistencia de Parámetros de Longitud en el repositorio de GitHub ikus060/rdiffweb versiones anteriores a 2.4.8.