high8.8
CVE-2017-7235
An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1.
Impact
An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A malicious website owner could craft a page that executes arbitrary Python code against any cfscrape user who scrapes that website. This is fixed in 1.8.0.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cloudflare-Scrape Project | Cloudflare-Scrape | Versions 1.6.6, 1.6.7, 1.6.8, 1.7.0, 1.7.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/97191
- https://github.com/Anorov/cloudflare-scrape/issues/97
- https://github.com/Anorov/cloudflare-scrape/releases/tag/1.8.0
- http://www.securityfocus.com/bid/97191
- https://github.com/Anorov/cloudflare-scrape/issues/97
- https://github.com/Anorov/cloudflare-scrape/releases/tag/1.8.0