Skip to content
OpenAdvisories

Package · Debian

python-mechanicalsoup

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2023-34457

    MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form

    MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to version 1.3.0, a malicious web server can read arbitrary files on the client using a `<input type="file" ...>` inside HTML form. All users of M…

    MechanicalSoup MechanicalSoup python-mechanicalsoup mechanicalsoup Debian Ubuntu PyPI