CVE-2017-0906

2 advisories.

PyPI/recurly CVE-2017-0906: critical 9.8

Recurly vulnerable to SSRF

Action: Upgrade recurly to 2.0.5 or later.

pip install recurly==2.6.2

pip install recurly==2.5.1

pip install recurly==2.4.5

pip install recurly==2.3.1

pip install recurly==2.2.22

pip install recurly==2.1.16

pip install recurly==2.0.5

Affected

introduced	fixed	last affected
2.6.0	2.6.2	-
2.5.0	2.5.1	-
2.4.0	2.4.5	-
2.3.0	2.3.1	-
2.2.0	2.2.22	-
2.1.0	2.1.16	-
0	2.0.5	-

Fixed versions

2.6.2

2.5.1

2.4.5

2.3.1

2.2.22

2.1.16

2.0.5

Sources

CVE-2017-0906 · published 2019-01-04T17:48:09Z · modified 2024-10-26T18:50:44.966235Z · JSON

PyPI/recurly CVE-2017-0906: unknown

The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result i