{"cvss":8.8,"datePublished":"2024-03-04T00:00:00Z","dateUpdated":"2024-03-04T00:00:00Z","description":"Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This issue is fixed in version 0.9.9. There are no known workarounds.","dueDate":"","id":"CVE-2021-32849","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"gerapy","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"gerapy gerapy Improper Neutralization of Special Elements used in an OS Command","vendor":"gerapy"}