scrapy records

7 published records for vendor scrapy.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2017-14158No exploit	Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily many files are readscrapy · scrapy · CWE-400 Pre-auth Denial of service	High7.5	—	2.6%	Sep 5, 2017
30Monitor	CVE-2024-3572No exploit	XML External Entity (XXE) Vulnerability in scrapy/scrapyscrapy · scrapy · CWE-409 Pre-auth XXE Denial of service	High7.5	—	0.8%	Apr 15, 2024
30Monitor	CVE-2024-1968No exploit	Authorization Header Leakage in scrapy/scrapy on Scheme Change Redirectsscrapy · scrapy · CWE-200 Pre-auth Info leak	High7.5	—	0.6%	May 20, 2024
30Monitor	CVE-2024-3574No exploit	Authorization Header Leak During Cross-Domain Redirect in scrapy/scrapyscrapy · scrapy · CWE-200 Pre-auth Info leak	High7.5	—	0.6%	Apr 15, 2024
26Monitor	CVE-2021-41125No exploit	HTTP authentication credential leak to target websites in scrapyscrapy · scrapy · CWE-200 Info leak	Medium6.5	—	1.2%	Oct 6, 2021
26Monitor	CVE-2022-0577No exploit	Exposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapyscrapy · scrapy · CWE-200 Info leak	Medium6.5	—	1.2%	Mar 2, 2022
26Monitor	CVE-2024-1892No exploit	ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpiderscrapy · scrapy · CWE-1333 Pre-auth Denial of service	Medium6.5	—	0.5%	Feb 27, 2024

CVE-2017-14158
31Monitor
Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily many files are read
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
- Denial of service
scrapy · scrapySep 5, 2017
CVE-2024-3572
30Monitor
XML External Entity (XXE) Vulnerability in scrapy/scrapy
HighCVSS 7.5No exploitEPSS 0%
scrapy · scrapyApr 15, 2024
CVE-2024-1968
30Monitor
Authorization Header Leakage in scrapy/scrapy on Scheme Change Redirects
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
scrapy · scrapyMay 20, 2024
CVE-2024-3574
30Monitor
Authorization Header Leak During Cross-Domain Redirect in scrapy/scrapy
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
scrapy · scrapyApr 15, 2024
CVE-2021-41125
26Monitor
HTTP authentication credential leak to target websites in scrapy
MediumCVSS 6.5No exploitEPSS 1%
- Info leak
scrapy · scrapyOct 6, 2021
CVE-2022-0577
26Monitor
Exposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapy
MediumCVSS 6.5No exploitEPSS 1%
- Info leak
scrapy · scrapyMar 2, 2022
CVE-2024-1892
26Monitor
ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider
MediumCVSS 6.5No exploitEPSS 0%
- Pre-auth
- Denial of service
scrapy · scrapyFeb 27, 2024