CVE-2024-39163
binux pyspider up to v0.3.10 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Flask endpoints.
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for pyspider in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
binux pyspider up to v0.3.10 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Flask endpoints.
pyspider through 0.3.10 allows /update XSS. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Check your installed stack and versions against the current vulnerability feeds.