8.8
CVE-2017-7235
- EPSS 0.49%
- Veröffentlicht 23.03.2017 04:59:00
- Zuletzt bearbeitet 20.04.2025 01:37:25
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginAn issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A malicious website owner could craft a page that executes arbitrary Python code against any cfscrape user who scrapes that website. This is fixed in 1.8.0.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Cloudflare-scrape Project ≫ Cloudflare-scrape Version1.6.6
Cloudflare-scrape Project ≫ Cloudflare-scrape Version1.6.7
Cloudflare-scrape Project ≫ Cloudflare-scrape Version1.6.8
Cloudflare-scrape Project ≫ Cloudflare-scrape Version1.7.0
Cloudflare-scrape Project ≫ Cloudflare-scrape Version1.7.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.49% | 0.65 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| nvd@nist.gov | 6.8 | 8.6 | 6.4 |
AV:N/AC:M/Au:N/C:P/I:P/A:P
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.