287 matches found
FreeBSD : py-Scrapy -- DoS vulnerability (4eb5dccb-923c-4f18-9cd4-b53f9e28d4d7)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 4eb5dccb-923c-4f18-9cd4-b53f9e28d4d7 advisory. - Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files...
FreeBSD : py-Scrapy -- credentials leak vulnerability (2ad25820-c71a-4e6c-bb99-770c66fe496d)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2ad25820-c71a-4e6c-bb99-770c66fe496d advisory. - When the built-in HTTP proxy downloader middleware processes a request with proxy metadata, and that...
FreeBSD : py-Scrapy -- exposure of sensitive information vulnerability (67fe5e5b-549f-4a2a-9834-53f60eaa415e)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 67fe5e5b-549f-4a2a-9834-53f60eaa415e advisory. - Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior t...
SUSE CVE-2021-41125
Scrapy is a high-level web crawling and scraping framework for Python. If you use HttpAuthMiddleware i.e. the httpuser and httppass spider attributes for HTTP authentication, all requests will expose your credentials to the request target. This includes requests generated by Scrapy components, su...
SUSE CVE-2022-0577
Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1...
Scrapy before 2.6.2 and 1.8.3 vulnerable to one proxy sending credentials to another
Impact When the built-in HTTP proxy downloader middleware processes a request with proxy metadata, and that proxy metadata includes proxy credentials, the built-in HTTP proxy downloader middleware sets the Proxy-Authentication header, but only if that header is not already set. There are...
GHSA-9X8M-2XPF-CRP3 Scrapy before 2.6.2 and 1.8.3 vulnerable to one proxy sending credentials to another
Impact When the built-in HTTP proxy downloader middleware processes a request with proxy metadata, and that proxy metadata includes proxy credentials, the built-in HTTP proxy downloader middleware sets the Proxy-Authentication header, but only if that header is not already set. There are...
py-Scrapy -- credentials leak vulnerability
When the built-in HTTP proxy downloader middleware processes a request with proxy metadata, and that proxy metadata includes proxy credentials, the built-in HTTP proxy downloader middleware sets the Proxy-Authentication header, but only if that header is not already set. There are third-party...
Scrapy denial of service vulnerability
Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by...
GHSA-H7WM-PH43-C39P Scrapy denial of service vulnerability
Scrapy 1.4 allows remote attackers to cause a denial of service memory consumption via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by...
[SECURITY] [DLA 2950-1] python-scrapy security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-2950-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort March 16, 2022 https://wiki.debian.org/LTS -...
Debian: Security Advisory (DLA-2950-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian DLA-2950-1 : python-scrapy - LTS security update
The remote Debian 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-2950 advisory. It was found that Scrapy, a framework for extracting data from websites, could send HTTP Authorization as well as cookies to other domains in case of redirections,...
DLA-2950-1 python-scrapy - security update
Bulletin has no description...
Gerapy has unspecified vulnerabilities
Gerapy is a distributed crawler management framework based on Scrapy, Scrapyd, Django and Vue.js. A security vulnerability exists in Gerapy v 0.9.7, which stems from an access control vulnerability that can be caused by the spider parameter in the projectconfigure function. No details of the...
Scrapy Information Disclosure Vulnerability (CNVD-2022-17012)
Scrapy is a free and open-source web crawler framework written in Python.An information disclosure vulnerability exists in versions of Scrapy prior to 2.6.1, which stems from the product's failure to effectively protect sensitive information. An attacker could use this vulnerability to obtain...
Insecure Cookies
scrapy is using insecure cookies. The vulnerability exists in cookie.py because the cookie-setting is not restricted based on the public suffix list which allows an attacker to inject cookies from a controlled domain...
Information Disclosure
Scrapy is vulnerable to information disclosure. The library does not properly check cookie headers before being redirected to the location URL, allowing an attacker to gain sensitive information or hijack users accounts by redirecting to malicious URLs...
