Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2021-41125

Scrapy is a high-level web crawling and scraping framework for Python. If you use `HttpAuthMiddleware` (i.e. the `http_user` and `http_pass` spider attributes) for HTTP authentication, all requests will expose your credentials to the request target. This includes requests generated by Scrapy components, such as `robots.txt` requests sent by Scrapy when the `ROBOTSTXT_OBEY` setting is set to `True`, or as requests reached through redirects. Upgrade to Scrapy 2.5.1 and use the new `http_auth_domain` spider attribute to control which domains are allowed to receive the configured HTTP authentication credentials. If you are using Scrapy 1.8 or a lower version, and upgrading to Scrapy 2.5.1 is not an option, you may upgrade to Scrapy 1.8.1 instead. If you cannot upgrade, set your HTTP authentication credentials on a per-request basis, using for example the `w3lib.http.basic_auth_header` function to convert your credentials into a value that you can assign to the `Authorization` header of your request, instead of defining your credentials globally using `HttpAuthMiddleware`.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.3%
CVSS Severity
CVSS v3 Score 5.7
CVSS v2 Score 4.0
References
Products affected by CVE-2021-41125
  • Scrapy » Scrapy » Version: N/A
    cpe:2.3:a:scrapy:scrapy:-
  • Scrapy » Scrapy » Version: 0.10
    cpe:2.3:a:scrapy:scrapy:0.10
  • Scrapy » Scrapy » Version: 0.10.1
    cpe:2.3:a:scrapy:scrapy:0.10.1
  • Scrapy » Scrapy » Version: 0.10.2
    cpe:2.3:a:scrapy:scrapy:0.10.2
  • Scrapy » Scrapy » Version: 0.10.3
    cpe:2.3:a:scrapy:scrapy:0.10.3
  • Scrapy » Scrapy » Version: 0.14.0
    cpe:2.3:a:scrapy:scrapy:0.14.0
  • Scrapy » Scrapy » Version: 0.14.1
    cpe:2.3:a:scrapy:scrapy:0.14.1
  • Scrapy » Scrapy » Version: 0.14.2
    cpe:2.3:a:scrapy:scrapy:0.14.2
  • Scrapy » Scrapy » Version: 0.14.3
    cpe:2.3:a:scrapy:scrapy:0.14.3
  • Scrapy » Scrapy » Version: 0.14.4
    cpe:2.3:a:scrapy:scrapy:0.14.4
  • Scrapy » Scrapy » Version: 0.15.0
    cpe:2.3:a:scrapy:scrapy:0.15.0
  • Scrapy » Scrapy » Version: 0.15.1
    cpe:2.3:a:scrapy:scrapy:0.15.1
  • Scrapy » Scrapy » Version: 0.16.0
    cpe:2.3:a:scrapy:scrapy:0.16.0
  • Scrapy » Scrapy » Version: 0.16.1
    cpe:2.3:a:scrapy:scrapy:0.16.1
  • Scrapy » Scrapy » Version: 0.16.2
    cpe:2.3:a:scrapy:scrapy:0.16.2
  • Scrapy » Scrapy » Version: 0.16.3
    cpe:2.3:a:scrapy:scrapy:0.16.3
  • Scrapy » Scrapy » Version: 0.16.4
    cpe:2.3:a:scrapy:scrapy:0.16.4
  • Scrapy » Scrapy » Version: 0.16.5
    cpe:2.3:a:scrapy:scrapy:0.16.5
  • Scrapy » Scrapy » Version: 0.17.0
    cpe:2.3:a:scrapy:scrapy:0.17.0
  • Scrapy » Scrapy » Version: 0.18.0
    cpe:2.3:a:scrapy:scrapy:0.18.0
  • Scrapy » Scrapy » Version: 0.18.1
    cpe:2.3:a:scrapy:scrapy:0.18.1
  • Scrapy » Scrapy » Version: 0.18.2
    cpe:2.3:a:scrapy:scrapy:0.18.2
  • Scrapy » Scrapy » Version: 0.18.3
    cpe:2.3:a:scrapy:scrapy:0.18.3
  • Scrapy » Scrapy » Version: 0.18.4
    cpe:2.3:a:scrapy:scrapy:0.18.4
  • Scrapy » Scrapy » Version: 0.19.0
    cpe:2.3:a:scrapy:scrapy:0.19.0
  • Scrapy » Scrapy » Version: 0.20.0
    cpe:2.3:a:scrapy:scrapy:0.20.0
  • Scrapy » Scrapy » Version: 0.20.1
    cpe:2.3:a:scrapy:scrapy:0.20.1
  • Scrapy » Scrapy » Version: 0.20.2
    cpe:2.3:a:scrapy:scrapy:0.20.2
  • Scrapy » Scrapy » Version: 0.21.0
    cpe:2.3:a:scrapy:scrapy:0.21.0
  • Scrapy » Scrapy » Version: 0.22.0
    cpe:2.3:a:scrapy:scrapy:0.22.0
  • Scrapy » Scrapy » Version: 0.22.1
    cpe:2.3:a:scrapy:scrapy:0.22.1
  • Scrapy » Scrapy » Version: 0.22.2
    cpe:2.3:a:scrapy:scrapy:0.22.2
  • Scrapy » Scrapy » Version: 0.23.0
    cpe:2.3:a:scrapy:scrapy:0.23.0
  • Scrapy » Scrapy » Version: 0.24.0
    cpe:2.3:a:scrapy:scrapy:0.24.0
  • Scrapy » Scrapy » Version: 0.24.1
    cpe:2.3:a:scrapy:scrapy:0.24.1
  • Scrapy » Scrapy » Version: 0.24.2
    cpe:2.3:a:scrapy:scrapy:0.24.2
  • Scrapy » Scrapy » Version: 0.24.3
    cpe:2.3:a:scrapy:scrapy:0.24.3
  • Scrapy » Scrapy » Version: 0.24.4
    cpe:2.3:a:scrapy:scrapy:0.24.4
  • Scrapy » Scrapy » Version: 0.24.5
    cpe:2.3:a:scrapy:scrapy:0.24.5
  • Scrapy » Scrapy » Version: 0.24.6
    cpe:2.3:a:scrapy:scrapy:0.24.6
  • Scrapy » Scrapy » Version: 0.25.0
    cpe:2.3:a:scrapy:scrapy:0.25.0
  • Scrapy » Scrapy » Version: 0.25.1
    cpe:2.3:a:scrapy:scrapy:0.25.1
  • Scrapy » Scrapy » Version: 0.7
    cpe:2.3:a:scrapy:scrapy:0.7
  • Scrapy » Scrapy » Version: 0.8
    cpe:2.3:a:scrapy:scrapy:0.8
  • Scrapy » Scrapy » Version: 0.9
    cpe:2.3:a:scrapy:scrapy:0.9
  • Scrapy » Scrapy » Version: 1.0.0
    cpe:2.3:a:scrapy:scrapy:1.0.0
  • Scrapy » Scrapy » Version: 1.0.1
    cpe:2.3:a:scrapy:scrapy:1.0.1
  • Scrapy » Scrapy » Version: 1.0.2
    cpe:2.3:a:scrapy:scrapy:1.0.2
  • Scrapy » Scrapy » Version: 1.0.3
    cpe:2.3:a:scrapy:scrapy:1.0.3
  • Scrapy » Scrapy » Version: 1.0.4
    cpe:2.3:a:scrapy:scrapy:1.0.4
  • Scrapy » Scrapy » Version: 1.0.5
    cpe:2.3:a:scrapy:scrapy:1.0.5
  • Scrapy » Scrapy » Version: 1.0.6
    cpe:2.3:a:scrapy:scrapy:1.0.6
  • Scrapy » Scrapy » Version: 1.0.7
    cpe:2.3:a:scrapy:scrapy:1.0.7
  • Scrapy » Scrapy » Version: 1.1.0
    cpe:2.3:a:scrapy:scrapy:1.1.0
  • Scrapy » Scrapy » Version: 1.1.1
    cpe:2.3:a:scrapy:scrapy:1.1.1
  • Scrapy » Scrapy » Version: 1.1.2
    cpe:2.3:a:scrapy:scrapy:1.1.2
  • Scrapy » Scrapy » Version: 1.1.3
    cpe:2.3:a:scrapy:scrapy:1.1.3
  • Scrapy » Scrapy » Version: 1.1.4
    cpe:2.3:a:scrapy:scrapy:1.1.4
  • Scrapy » Scrapy » Version: 1.2.0
    cpe:2.3:a:scrapy:scrapy:1.2.0
  • Scrapy » Scrapy » Version: 1.2.1
    cpe:2.3:a:scrapy:scrapy:1.2.1
  • Scrapy » Scrapy » Version: 1.2.2
    cpe:2.3:a:scrapy:scrapy:1.2.2
  • Scrapy » Scrapy » Version: 1.2.3
    cpe:2.3:a:scrapy:scrapy:1.2.3
  • Scrapy » Scrapy » Version: 1.3.0
    cpe:2.3:a:scrapy:scrapy:1.3.0
  • Scrapy » Scrapy » Version: 1.3.1
    cpe:2.3:a:scrapy:scrapy:1.3.1
  • Scrapy » Scrapy » Version: 1.3.2
    cpe:2.3:a:scrapy:scrapy:1.3.2
  • Scrapy » Scrapy » Version: 1.3.3
    cpe:2.3:a:scrapy:scrapy:1.3.3
  • Scrapy » Scrapy » Version: 1.4
    cpe:2.3:a:scrapy:scrapy:1.4
  • Scrapy » Scrapy » Version: 1.5.0
    cpe:2.3:a:scrapy:scrapy:1.5.0
  • Scrapy » Scrapy » Version: 1.5.1
    cpe:2.3:a:scrapy:scrapy:1.5.1
  • Scrapy » Scrapy » Version: 1.5.2
    cpe:2.3:a:scrapy:scrapy:1.5.2
  • Scrapy » Scrapy » Version: 1.6.0
    cpe:2.3:a:scrapy:scrapy:1.6.0
  • Scrapy » Scrapy » Version: 1.7.0
    cpe:2.3:a:scrapy:scrapy:1.7.0
  • Scrapy » Scrapy » Version: 1.7.1
    cpe:2.3:a:scrapy:scrapy:1.7.1
  • Scrapy » Scrapy » Version: 1.7.2
    cpe:2.3:a:scrapy:scrapy:1.7.2
  • Scrapy » Scrapy » Version: 1.7.3
    cpe:2.3:a:scrapy:scrapy:1.7.3
  • Scrapy » Scrapy » Version: 1.7.4
    cpe:2.3:a:scrapy:scrapy:1.7.4
  • Scrapy » Scrapy » Version: 1.8.0
    cpe:2.3:a:scrapy:scrapy:1.8.0
  • Scrapy » Scrapy » Version: 2.0.0
    cpe:2.3:a:scrapy:scrapy:2.0.0
  • Scrapy » Scrapy » Version: 2.0.1
    cpe:2.3:a:scrapy:scrapy:2.0.1
  • Scrapy » Scrapy » Version: 2.1.0
    cpe:2.3:a:scrapy:scrapy:2.1.0
  • Scrapy » Scrapy » Version: 2.2.0
    cpe:2.3:a:scrapy:scrapy:2.2.0
  • Scrapy » Scrapy » Version: 2.2.1
    cpe:2.3:a:scrapy:scrapy:2.2.1
  • Scrapy » Scrapy » Version: 2.3.0
    cpe:2.3:a:scrapy:scrapy:2.3.0
  • Scrapy » Scrapy » Version: 2.4.0
    cpe:2.3:a:scrapy:scrapy:2.4.0
  • Scrapy » Scrapy » Version: 2.4.1
    cpe:2.3:a:scrapy:scrapy:2.4.1
  • Scrapy » Scrapy » Version: 2.5.0
    cpe:2.3:a:scrapy:scrapy:2.5.0
  • Debian » Debian Linux » Version: 9.0
    cpe:2.3:o:debian:debian_linux:9.0


Products
Pricing
Contact Us

Shodan ® - All rights reserved