Headline
GHSA-mp5p-g2jv-r8qw: rdiffweb before 2.4.2 contains Weak Password Requirements
rdiffweb prior to 2.4.2 has no password policy or password checking, which could make users vulnerable to brute force password guessing attacks. Version 2.4.2 enforces minimum and maximum password lengths.
rdiffweb before 2.4.2 contains Weak Password Requirements
High severity GitHub Reviewed Published Sep 14, 2022 • Updated Sep 15, 2022