CVE-2021-43857: critical vulnerability in Gerapy
Gerapy may contain remote code execution vulnerability
Published · Updated
60Vexday Risk Score
Keep watching. It has a public proof of concept.
ssvc Attendcvss 9.8epss 55%
from disclosure to weapon7 days
Published on NVDDec 27
1st PoC+7d
exploitation probability
55%top 1% of all CVEs
observed exploitation
nono source reports it
7 public exploit(s)
Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Gerapy · Gerapypublic PoCs found — 7
exploitdbwww.exploit-db.com/exploits/50640unverifiedgithubgithub.com/LongWayHomie/CVE-2021-43857★ 7githubgithub.com/ProwlSec/gerapy-cve-2021-43857★ 2githubgithub.com/lowkey0808/CVE-2021-43857★ 1githubgithub.com/G4sp4rCS/CVE-2021-43857-POC★ 0githubgithub.com/afifudinmtop/CVE-2021-43857-Gerapy-v0.9.7★ 0cve_referencepacketstormsecurity.com/files/165459/Gerapy-0.9.7-Remote-Code-Execution.htmlunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.