CVE-2017-0907
critical
CVSS v3
9.8
CVSS v2
7.5
VIR risk
9.8
Description
Critical severity vulnerability that affects recurly-api-client
Predictions
Exploit likelihood
97%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: support@hackerone.com — https://github.com/recurly/recurly-client-net/commit/9eef460c0084afd5c24d66220c8b7a381cf9a1f1
Vendor advisory: support@hackerone.com — https://dev.recurly.com/page/net-updates
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| NuGet | recurly-api-client | <1.0.1 | 1.0.1 |
| NuGet | recurly-api-client | >=1.1.0,<1.1.10 | 1.1.10 |
| NuGet | recurly-api-client | >=1.2.0,<1.2.8 | 1.2.8 |
| NuGet | recurly-api-client | >=1.3.0,<1.3.2 | 1.3.2 |
| NuGet | recurly-api-client | >=1.4.0,<1.4.14 | 1.4.14 |
| NuGet | recurly-api-client | >=1.5.0,<1.5.3 | 1.5.3 |
| NuGet | recurly-api-client | >=1.6.0,<1.6.2 | 1.6.2 |
| NuGet | recurly-api-client | >=1.7.0,<1.7.1 | 1.7.1 |
| NuGet | recurly-api-client | >=1.8.0,<1.8.1 | 1.8.1 |
Application impact
References
CWEs
CWE-918
Verify integrity in audit chain (admin only). AS-IS.