CVE-2020-7698 Command Injection

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the projectconfigure endpoint, isn’t being sanitized...

CVE-2020-7698

CVE-2020-7698 affects the Gerapy package (versions 0 through before 0.9.3). The vulnerability is a command injection: user input processed by the project_configure endpoint is passed to Popen without proper sanitization, enabling potential remote/external execution. Connected documents corroborat...

CVE-2020-7698

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the projectconfigure endpoint, isn’t being sanitized...

CVE-2020-7698

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the projectconfigure endpoint, isn’t being sanitized...

PT-2020-19721

Name of the Vulnerable Software and Affected Versions Gerapy versions 0 through 0.9.3 Description The issue arises from unsanitized input being passed to Popen via the "project configure" endpoint. Recommendations For Gerapy versions 0 through 0.9.3, update to version 0.9.3 or later to resolve th...

CVE-2020-7698: Improper Neutralization of Special Elements used in an OS Command

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the projectconfigure endpoint, isn’t being sanitized...

Command Injection

Overview gerapy is a Distributed Crawler Management Framework Based on Scrapy, Scrapyd, Scrapyd-Client, Scrapyd-API, Django and Vue.js. Affected versions of this package are vulnerable to Command Injection. The input being passed to Popen, via the projectconfigure endpoint, isn’t being sanitized...