Description
binux pyspider up to v0.3.10 was discovered to contain a Cross-Site Request Forgery (CSRF) via the Flask endpoints.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | pyspider | <= 0.3.10 | — | GHSA-pqj8-xhcx-prxm |
High · 8.8
CVE-2024-39163
EUVD-2024-3493GHSA-pqj8-xhcx-prxmPYSEC-2026-1842
pyspider Cross-Site Request Forgery (CSRF) via the Flask endpoints
Published Dec 4, 2024 · Updated Dec 11, 2024 · Assigned by mitre