CVE-2023-4138

MediumCVSS 6.5

Published: 03/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.41%

32th percentile - higher than 32% of all known CVEs

In the GitHub repository ikus060/rdiffweb prior to version 2.8.0, there is an issue with resource allocation without limits or throttling.

The lack of limits on resource allocation may lead to system overload, jeopardizing application availability.

It is recommended to upgrade to version 2.8.0 or later to mitigate this vulnerability.

Original NVD description (English source)

Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.0.