Skip to content
Threat Feed
Subscribe

Product

Scrapy (< 2.17.0)

1 brief RSS
high advisory

Scrapy S3DownloadHandler Vulnerable to Credential Exposure via Plaintext HTTP

The Scrapy S3DownloadHandler defaults to sending signed AWS S3 requests over plaintext HTTP, potentially exposing AWS authorization headers and security tokens to network-based attackers.

Scrapy vulnerability cloud web-scraping
1t 1c