CVE-2021-32849: PYSEC-2022-17 - Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This i

CVE-2021-32849 · Severity: low · CVSS 3.1 · Published 2022-01-26

Technologies: gerapy (PyPI). Vendors: PyPI.

Executive brief

Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This issue is fixed in version 0.9.9. There are no known workarounds.

Affected products

PyPI gerapy

Related threats

PYSEC-2022-228 - An Access Control vunerabiity exists in Gerapy v 0.9.7 via the spider parameter in project_configure function.
PYSEC-2021-867 - Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue i
PYSEC-2020-44 - This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sa