Published: 02/03/2022 Updated: 24/03/2022

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 356

Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N

Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy before 2.6.1.

Vulnerable Product	Search on Vulmon	Subscribe to Product
scrapy scrapy
debian debian linux 9.0

Debian Bug report logs - #1008234 python-scrapy: CVE-2022-0577: Incorrect Authorization and Exposure of Sensitive Information to an Unauthorized Actor Package: src:python-scrapy; Maintainer for src:python-scrapy is Debian Python Team <team+python@trackerdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> ...

CWE-863 https://github.com/scrapy/scrapy/commit/8ce01b3b76d4634f55067d6cfdf632ec70ba304a https://huntr.dev/bounties/3da527b1-2348-4f69-9e88-2e11a96ac585 https://lists.debian.org/debian-lts-announce/2022/03/msg00021.html https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1008234 https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2022-0577

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect