CVE-2017-0906

2017-11-1317:29:00

Google

osv.dev

9.4 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.9%

JSON

The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the “Resource.get” method that could result in compromise of API keys or other critical resources.

CPENameOperatorVersion
recurly-client-pythoneq2.4.3
recurly-client-pythoneq2.0.0
recurly-client-pythoneq2.1.3
recurly-client-pythoneq2.2.6
recurly-client-pythoneq2.2.2
recurly-client-pythoneq2.2.10
recurly-client-pythoneq2.2.1
recurly-client-pythoneq2.1.15
recurly-client-pythoneq2.2.17
recurly-client-pythoneq2.1.13

Name	Operator	Version
recurly-client-python	eq	2.4.3
recurly-client-python	eq	2.0.0
recurly-client-python	eq	2.1.3
recurly-client-python	eq	2.2.6
recurly-client-python	eq	2.2.2
recurly-client-python	eq	2.2.10
recurly-client-python	eq	2.2.1
recurly-client-python	eq	2.1.15
recurly-client-python	eq	2.2.17
recurly-client-python	eq	2.1.13