Mechanicalsoup
Approved changes feed: RSS · Atom
cpe:2.3:a:mechanicalsoup:mechanicalsoup:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Mechanicalsoup (da9ecf02-3a34-5739-9fef-48a7e2a69e25) |
|---|---|
| Product | Mechanicalsoup (48e6aa52-6a2e-57a9-842b-87a40b955d1e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-34457 |
vulnerable | 2026-06-08 06:06:25.637819 |
MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form
MEDIUM (5.9)
MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to version 1.3.0, a malicious web server can read arbitrary files on the client using a `<input type="file" ...>` inside HTML form. All users of MechanicalSoup's form submission are affected, unless they took very specific (and manual) steps to reset HTML form field values. Version 1.3.0 contains a patch for this issue.
Published: 2023-07-05T19:25:35.966Z
Updated: 2025-02-13T16:55:35.658Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.