p PatchFirst

CVE-2024-39163

CVE-2024-39163

This page contains facts from public vulnerability sources. Check the original advisory before updating.

binux pyspider up to v0.3.10 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Flask endpoints.

CVSS 8.8 · High · EPSS 0.2%

Published
Updated

Stack: python

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • pyspider PyPI

    Versions
    • 0.3.0
    • 0.3.0.dev4
    • 0.3.0.dev5
    • 0.3.0.dev6
    • 0.3.0.dev7
    • 0.3.0a1
    • 0.3.0b1
    • 0.3.1
    • 0.3.10
    • 0.3.2
    • 0.3.3
    • 0.3.4
    • 0.3.5
    • 0.3.6
    • 0.3.7
    • 0.3.8
    • 0.3.9
    Affected ranges
    • ECOSYSTEM: ≤ 0.3.10

    No fix published

Original sources

Check your server →