CVE-2017-0906
Description
The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the "Resource.get" method that could result in compromise of API keys or other critical resources.
Risk Information
Base Score
9.8
MODERATE
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
0.519
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Vulnerabilities CVE-2017-0906 are fixed in Python-recurly 2.0.5 | Windows |
| Vulnerabilities CVE-2017-0906 are fixed in Python-recurly 2.1.16 | Windows |
| Vulnerabilities CVE-2017-0906 are fixed in Python-recurly 2.2.22 | Windows |
| Vulnerabilities CVE-2017-0906 are fixed in Python-recurly 2.3.1 | Windows |
| Vulnerabilities CVE-2017-0906 are fixed in Python-recurly 2.4.5 | Windows |
| Vulnerabilities CVE-2017-0906 are fixed in Python-recurly 2.5.1 | Windows |
| Vulnerabilities CVE-2017-0906 are fixed in Python-recurly 2.6.2 | Windows |
| Vulnerabilities CVE-2017-0906 are fixed in Ruby-recurly 2.6.2 | Windows |
| Vulnerabilities CVE-2017-0906 are fixed in Ruby-recurly 2.5.1 | Windows |
| Vulnerabilities CVE-2017-0906 are fixed in Ruby-recurly 2.4.5 | Windows |
| Vulnerabilities CVE-2017-0906 are fixed in Ruby-recurly 2.3.1 | Windows |
| Vulnerabilities CVE-2017-0906 are fixed in Ruby-recurly 2.2.22 | Windows |
| Vulnerabilities CVE-2017-0906 are fixed in Ruby-recurly 2.1.16 | Windows |
| Vulnerabilities CVE-2017-0906 are fixed in Ruby-recurly 2.0.5 | Windows |
| Vulnerabilities CVE-2017-0906 are fixed in Python-recurly for linux 2.0.5 | Linux |
| Vulnerabilities CVE-2017-0906 are fixed in Python-recurly for linux 2.1.16 | Linux |
| Vulnerabilities CVE-2017-0906 are fixed in Python-recurly for linux 2.2.22 | Linux |
| Vulnerabilities CVE-2017-0906 are fixed in Python-recurly for linux 2.3.1 | Linux |
| Vulnerabilities CVE-2017-0906 are fixed in Python-recurly for linux 2.4.5 | Linux |
| Vulnerabilities CVE-2017-0906 are fixed in Python-recurly for linux 2.5.1 | Linux |
| Vulnerabilities CVE-2017-0906 are fixed in Python-recurly for linux 2.6.2 | Linux |
| Vulnerabilities CVE-2017-0906 are fixed in Ruby-recurly for Linux 2.6.2 | Linux |
| Vulnerabilities CVE-2017-0906 are fixed in Ruby-recurly for Linux 2.5.1 | Linux |
| Vulnerabilities CVE-2017-0906 are fixed in Ruby-recurly for Linux 2.4.5 | Linux |
| Vulnerabilities CVE-2017-0906 are fixed in Ruby-recurly for Linux 2.3.1 | Linux |
| Vulnerabilities CVE-2017-0906 are fixed in Ruby-recurly for Linux 2.2.22 | Linux |
| Vulnerabilities CVE-2017-0906 are fixed in Ruby-recurly for Linux 2.1.16 | Linux |
| Vulnerabilities CVE-2017-0906 are fixed in Ruby-recurly for Linux 2.0.5 | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234