GHSA-xpwp-rq3x-x6v7Critical

Critical severity vulnerability that affects recurly-api-client

Published
October 16, 2018
Last Modified
January 9, 2023

🔗 CVE IDs covered (1)

CVE-2017-0907 →

📋 Description

The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery vulnerability due to incorrect use of "Uri.EscapeUriString" that could result in compromise of API keys or other critical resources.

🎯 Affected products9

  • nuget/recurly-api-client:< 1.0.1
  • nuget/recurly-api-client:>= 1.1.0, < 1.1.10
  • nuget/recurly-api-client:>= 1.2.0, < 1.2.8
  • nuget/recurly-api-client:>= 1.3.0, < 1.3.2
  • nuget/recurly-api-client:>= 1.4.0, < 1.4.14
  • nuget/recurly-api-client:>= 1.5.0, < 1.5.3
  • nuget/recurly-api-client:>= 1.6.0, < 1.6.2
  • nuget/recurly-api-client:= 1.7.0
  • nuget/recurly-api-client:= 1.8.0

🔗 References (5)