PYSEC-2017-68

2017-11-1317:29:00

Google

osv.dev

0.004 Low

EPSS

Percentile

72.9%

JSON

The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the “Resource.get” method that could result in compromise of API keys or other critical resources.

CPENameOperatorVersion
recurlyeq2.4.1
recurlyeq2.2.3
recurlyeq2.2.7
recurlyeq2.1.3
recurlyeq2.1.11
recurlyeq2.2.12
recurlyeq2.1.8
recurlyeq2.1.6
recurlyeq2.2.6
recurlyeq2.2.2