Advisories · Technology
rclone.
Every CVE that names rclone among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.0 Medium
Rclone before v1.75.2 B2 Credential Leak on Redirect via --b2-download-url
- rclone
- Weak cryptography or TLS
- CVSS 7.0 High
Rclone before 1.75.2 Path Traversal via translateLink .rclonelink Suffix Trim
- rclone
- Path traversal
- CVSS 7.6 High
Rclone 1.52.0 before 1.75.2 CSRF via pCloud OAuth Callback
- rclone
- CWE-346
- CVSS 6.9 Medium
Rclone 1.64.0 before 1.75.2 serve webdav Authentication Bypass via OPTIONS Requests
- rclone
- Information disclosure
- CVSS 8.2 High
rclone from 1.37 before 1.74.2 SSRF via --rc-serve scheme-relative remote roots
- rclone
- Server-side request forgery (SSRF)
- CVSS 8.7 High
Rclone before 1.75.2 Path Traversal via serve webdav MKCOL
- rclone
- Path traversal
- CVSS 6.3 Medium
rclone v1.56.0 before v1.75.2 WebDAV Credential Header Leak on Redirect
- rclone
- Information disclosure
- CVSS 7.7 High
rclone 1.55.0 before 1.75.2 selfupdate Signature Verification Bypass via SHA256SUMS
- rclone
- Weak cryptography or TLS
- CVSS 6.9 Medium
rclone serve s3 1.75.0 before 1.75.2 Memory Limit Bypass via Multipart Overflow
- rclone
- Memory corruption
- CVSS 6.1 Medium
Rclone v1.68.0 before v1.75.2 Authorization Bypass in serve s3 Multipart Uploads
- rclone
- Broken access control
- CVSS 4.6 Medium
rclone serve docker Path Traversal via Volume Name
- rclone
- Path traversal
- CVSS 2.3 Low
rclone before 1.75.1 Path Traversal via Directory Listing Names
- rclone
- Path traversal
- CVSS 6.9 Medium
rclone before 1.75.0 Authentication Bypass via pprof
- rclone
- Information disclosure
- CVSS 7.1 High
rclone Archive Backend SquashFS Parser Denial of Service
- rclone
- CWE-129