Lucene search
PRIOn knowledge basePRION:CVE-2023-34457HistoryJul 05, 2023 - 8:15 p.m.
Design/Logic Flaw
2023-07-0520:15:00
PRIOn knowledge base
www.prio-n.com
2
python
library
automation
website
security
vulnerability
patch
nvd
0.001 Low
EPSS
Percentile
25.4%
MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to version 1.3.0, a malicious web server can read arbitrary files on the client using a <input type="file" ...> inside HTML form. All users of MechanicalSoup’s form submission are affected, unless they took very specific (and manual) steps to reset HTML form field values. Version 1.3.0 contains a patch for this issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mechanicalsoup | lt | 1.3.0 |
Related
veracode
veracode
Arbitrary File Read
2023-07-11 03:25:05
ubuntucve
ubuntucve
CVE-2023-34457
2023-07-05 00:00:00
github
github
osv
osv
CVE-2023-34457
2023-07-05 20:15:10
MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form
2023-07-05 21:35:54
PYSEC-2023-108
2023-07-05 20:15:00
nvd
nvd
CVE-2023-34457
2023-07-05 20:15:10
debiancve
debiancve
CVE-2023-34457
2023-07-05 20:15:10
cvelist
cvelist
cve
cve
CVE-2023-34457
2023-07-05 20:15:10