GitHub Advisoryadvisory · PyPI

GHSA-5mc5-5j6c-qmf9 cfscrape Improper Input Validation vulnerability

HIGH Published 2018-07-13 Modified 2024-09-13 Official page ↗
Aliases
CVE-2017-7235
Ecosystem
PyPI
Packages
cfscrape
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-20
Reviewed
2020-06-16

Affected packages

• PyPI cfscrape: >= 1.6.6, < 1.8.0 → fixed in 1.8.0

Description

An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A malicious website owner could craft a page that executes arbitrary Python code against any cfscrape user who scrapes that website. This is fixed in 1.8.0.

Related

Alias · CVE (1)

  • CVE-2017-7235 An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. vulnerability

Weakness · CWE (1)

  • CWE-20 Improper Input Validation weakness

References