CVE-2021-43857: PYSEC-2021-867 - Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue i

CVE-2021-43857 · Severity: low · CVSS 3.1 · Published 2021-12-27

Technologies: gerapy (PyPI). Vendors: PyPI.

Executive brief

Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8.

Affected products

PyPI gerapy

Related threats

PYSEC-2022-228 - An Access Control vunerabiity exists in Gerapy v 0.9.7 via the spider parameter in project_configure function.
PYSEC-2022-17 - Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This i
PYSEC-2020-44 - This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sa