CVEs-PoC/2017/CVE-2017-7235.md

CVE-2017-7235

Description

An issue was discovered in cloudflare-scrape 1.6.6 through 1.7.1. A malicious website owner could craft a page that executes arbitrary Python code against any cfscrape user who scrapes that website. This is fixed in 1.8.0.

POC

Reference

• https://github.com/Anorov/cloudflare-scrape/issues/97
• https://github.com/Anorov/cloudflare-scrape/releases/tag/1.8.0

Github

• https://github.com/ARPSyndicate/cvemon