Arbitrary Code Execution Vulnerability in Cloudflare-Scrape by Anorov
CVE-2017-7235

8.8HIGH

Key Information:

Vendor: Cloudflare-scrape Project
Status: Cloudflare-scrape
Vendor: CVE Published:; 23 March 2017

🔔 Create Cloudflare-scrape Project Vulnerability Alert

What is CVE-2017-7235?

A vulnerability exists in versions 1.6.6 to 1.7.1 of cloudflare-scrape that allows a malicious actor to craft a specially designed webpage. When a user scrapes this page, arbitrary Python code could be executed in the context of the cfscrape user, leading to potential security compromises. This issue is addressed in version 1.8.0, and users are urged to update promptly to mitigate risks.