CVE-2021-44597
Duplicate Advisory: Incorrect Authorization in Gerapy
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-43857. Reason: This candidate is a reservation duplicate of CVE-2021-43857. Notes: All CVE users should reference CVE-2021-43857 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
What each source reports
GitHub Advisories Score usedGHSA-29vr-79w7-p649
Duplicate Advisory: Incorrect Authorization in Gerapy
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-9w7f-m4j4-j3xw. This link is maintained to preserve external references.
Original Description
An Access Control vunerabiity exists in Gerapy v 0.9.7 via the spider parameter in project_configure function.
- Record
GHSA-29vr-79w7-p649- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-863
- Updated
- 2026-11-02
CVE List No score
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-43857. Reason: This candidate is a reservation duplicate of CVE-2021-43857. Notes: All CVE users should reference CVE-2021-43857 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
- Record
CVE-2021-44597- Updated
- 2026-11-02
EUVDEUVD-2022-0113
An Access Control vunerabiity exists in Gerapy v 0.9.7 via the spider parameter in project_configure function.
- Record
EUVD-2022-0113- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
NVD No score
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-43857. Reason: This candidate is a reservation duplicate of CVE-2021-43857. Notes: All CVE users should reference CVE-2021-43857 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
- Record
CVE-2021-44597- Updated
- 2026-11-02
OSVGHSA-29vr-79w7-p649
Duplicate Advisory: Incorrect Authorization in Gerapy
Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-9w7f-m4j4-j3xw. This link is maintained to preserve external references.
Original Description
An Access Control vunerabiity exists in Gerapy v 0.9.7 via the spider parameter in project_configure function.
- Record
GHSA-29vr-79w7-p649- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-863
- Updated
- 2026-11-02
OSVPYSEC-2022-228 No score
An Access Control vunerabiity exists in Gerapy v 0.9.7 via the spider parameter in project_configure function.
- Record
PYSEC-2022-228- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
gerapyPyPI |
before 0.9.8, plus listed versions 0.6.60.6.70.6.80.6.90.7.0 Show 35 moreShow less0.7.10.7.20.7.30.7.60.7.70.7.80.7.90.8.00.8.10.8.20.8.30.8.4rc20.8.50.8.5rc20.8.60.8.6a00.8.6b00.8.6b10.8.6rc10.8.6rc20.8.70.8.80.9.00.9.10.9.20.9.2a00.9.2rc10.9.30.9.3a10.9.3a20.9.3b10.9.50.9.60.9.6a10.9.7 |
0.9.8 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| aliases, references | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-44597 has been rejected by its source and should not be treated as a live vulnerability, published March 10, 2022. Fixed in gerapy 0.9.8.
References
github.com/Gerapy/Gerapy/issues/219
nvd.nist.gov/vuln/detail/CVE-2021-44597