CVE-2017-0907

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2017-0907
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-0907.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-0907
Aliases
Published
2017-11-13T17:29:00.490Z
Modified
2026-03-13T14:21:20.710175Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

The Recurly Client .NET Library before 1.0.1, 1.1.10, 1.2.8, 1.3.2, 1.4.14, 1.5.3, 1.6.2, 1.7.1, 1.8.1 is vulnerable to a Server-Side Request Forgery vulnerability due to incorrect use of "Uri.EscapeUriString" that could result in compromise of API keys or other critical resources.

References

Affected packages

Git / github.com/recurly/recurly-client-dotnet

Affected ranges

Type
GIT
Repo
https://github.com/recurly/recurly-client-dotnet
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
9eef460c0084afd5c24d66220c8b7a381cf9a1f1
Type
GIT
Repo
https://github.com/recurly/recurly-client-net
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
68b06cbdacbb640c292985f812ffa932499b0dbe
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4d00c6e2ae9bcee94f204a7b54772cd38fc113c3
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1349baa57b9fc07a9240547721ec97ea31406e18
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0e8d547bfb091165373d317ab5d950359bfc9401
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b038b7c16b7b5809afc288609184b384469e4a07
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1349baa57b9fc07a9240547721ec97ea31406e18
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0e8d547bfb091165373d317ab5d950359bfc9401
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b038b7c16b7b5809afc288609184b384469e4a07
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
68b06cbdacbb640c292985f812ffa932499b0dbe
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4069938a24a0aedf7ec6ce0df16ab7acdb55828d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c5b787cd8643bebf50c40438910614761a7945a1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
84ac0879fbbd06f4a58a37647ae3bb95f46ecaa4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
209ca33aa9addd21fc42b0b5d63e05ebba1cd84e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
11c90e207d112810b8ed07984a16cd951edf987d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
d85106ec939c8e16a5a377732c2472a94766dba7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4543eaef6f6016ddc58af5c3fcef6e545eb482fb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
413c39c2c9037412ea8120bc4131d5640ee16bfa
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a2b21934cabedf7fb7e40068fc0fa2c245ea94fe
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9ae4d743e85e8993bdef543ea44f02483358f506
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9df9d30fa4c34982579a6885cca2a99c8d87c2bd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
953380da435e25dac3a90c397898791621d25bba
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
39858a10f3a89ae8bf8b256b52ce0b9d092a503a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fc42043407199c9073655a3b05145035d2d3c4eb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ce9c91f6735ec44553a054ade96b15a25034bd56
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7be2aae2c4a1dc707152b1510c9edce7fbe3a2e8
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
21b7c484473b9da763288695cde692236aa9dc8a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2fdecb584ac3b476d96a52e3338aebf022455732
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f5a60fcc812679c7ff48350b533cbf182a25e57e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
79d37d20caca2295316c8bba17d9e7a58593c6bd
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5b892284b700db338d013ece106268268c3fd499
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f56ea97e3825c956c4bffea2968b7eaee6adaa25
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
95efa2bcd1066bf8719999d9239235f1facbdbd2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
9f0e0eb77fd580274d978136992eaca8a29cf92f
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
638f3e19b95b3c9796e363a8a58f313dc2cfe002
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
638f3e19b95b3c9796e363a8a58f313dc2cfe002
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
3b64d7870bcdd4be9f44af83969ce0d4ac29b597
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ee5d24cb53f9ad89b81a3394c1ffc46ba07548eb
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4c05b1b51028783b4a75da00684f1970b83ffab6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
49b8ca9dd2198d0a208e7b9d516906e16d9fa23e
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1a1a508aad106f72e67d115fb0bcafef97239f5a
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c8317d031676fcb8d02c994f19949515ded252c7
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
494053d45382801ca2e50018eed281407f262d3d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
f36e79f64bd9b5a93efd76d3b925b421b39b6150
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cef02a8317f69561039a1769b2018c90ee4618e6
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.0-beta1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.0-beta2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.0-beta3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.0-rc1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.0.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.0.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.0.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0.0.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.1.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.2.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.3.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.2"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.3"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.4"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.5"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.6"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.7"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.8"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.9"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.11"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.12"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.4.13"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.5.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.6.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.6.1"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.7.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.8.0"
        }
    ]
}

Affected versions

1.*
1.0.0
1.0.0-beta1
1.0.0-beta2
1.0.0-beta3
1.0.0-rc1
1.0.0.1
1.0.0.2
1.0.0.3
1.0.0.4
1.1.0
1.1.1
1.1.4
1.1.5
1.1.6
1.1.7
1.1.8
1.1.9
1.2.0
1.2.1
1.2.2
1.2.5
1.2.6
1.2.7
1.3.0
1.3.1
1.4.0
1.4.1
1.4.10
1.4.11
1.4.12
1.4.13
1.4.2
1.4.3
1.4.4
1.4.5
1.4.6
1.4.7
1.4.8
1.4.9
1.5.0
1.6.0
1.6.1
1.7.0
1.8.0

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-0907.json"