Recurly vulnerable to SSRF

2019-01-0417:48:09

Google

osv.dev

9.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.9%

JSON

The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the Resource.get method that could result in compromise of API keys or other critical resources.

CPENameOperatorVersion
recurlyeq2.1.9
recurlyeq2.1.7
recurlyeq2.1.13
recurlyeq2.1.10
recurlyeq2.0.3
recurlyeq2.2.10
recurlyeq2.2.4
recurlyeq2.2.2
recurlyeq2.4.3
recurlyeq2.1.12