logo

Database

Enabled default configuration In python-scrapy

Description

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2022-05772. NVD-2022-05773. OSV-DEBIAN-2022-05774. OSV-2022-05775. GHSA-cjvr-mfj7-j4j86. GCVE-2022-05777. SECURITY-TRACKER-CVE-2022-05778. lists.debian.org

References

1. https://github.com/scrapy/scrapy/security/advisories/GHSA-cjvr-mfj7-j4j82. https://github.com/scrapy/scrapy/commit/8ce01b3b76d4634f55067d6cfdf632ec70ba304a3. https://github.com/pypa/advisory-database/tree/main/vulns/scrapy/PYSEC-2022-159.yaml4. https://huntr.dev/bounties/3da527b1-2348-4f69-9e88-2e11a96ac585

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.