Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-17012
HistoryMar 04, 2022 - 12:00 a.m.

Scrapy Information Disclosure Vulnerability (CNVD-2022-17012)

2022-03-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.002 Low

EPSS

Percentile

64.6%

Scrapy is a free and open-source web crawler framework written in Python.An information disclosure vulnerability exists in versions of Scrapy prior to 2.6.1, which stems from the product’s failure to effectively protect sensitive information. An attacker could use this vulnerability to obtain sensitive information.

CPENameOperatorVersion
scrapy scrapylt2.6.1