PT-2021-23983
CVE-2021-43857
·
Published
2021-12-27
·
Updated
2022-01-07
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Gerapy versions prior to 0.9.8
Description:
Gerapy is a distributed crawler management framework. The issue allows for remote code execution. The
project configure function is affected.Recommendations:
For Gerapy versions prior to 0.9.8, update to version 0.9.8 by running
pip3 install -U gerapy to resolve the issue. As a temporary workaround, consider restricting access to the project configure function until the update is applied.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾