Executive brief
This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.
Affected products
- PyPI gerapy
Junglewise Threat Intelligence
CVE-2020-7698: PYSEC-2020-44 - This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sa
CVE-2020-7698 · Severity: low · CVSS 3.1 · Published 2020-07-29
Technologies: gerapy (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2022-228 - An Access Control vunerabiity exists in Gerapy v 0.9.7 via the spider parameter in project_configure function.
- PYSEC-2022-17 - Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This i
- PYSEC-2021-867 - Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue i